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Quantum information is a rapidly advancing area of interdisciplinary research. It may lead to 
real-world applications for communication and computation unavailable without the exploitation 
of quantum properties such as nonorthogonality or entanglement. We review the progress in 
quantum information based on continuous quantum variables, with emphasis on quantum optical 
implementations in terms of the quadrature amplitudes of the electromagnetic field. 
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Quantum information is a relatively young branch of 
physics. One of its goals is to interpret the concepts 
of quantum physics from an information theoretic point 
of view. This may lead to a deeper understanding of 
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quantum theory. Conversely, information and computa- 
tion are intrinsically physical concepts, since they rely 
on physical systems in which information is stored and 
by means of which information is processed or transmit- 
ted. Hence physical concepts, and at a more fundamental 
level quantum physical concepts, must be incorporated 
in a theory of information and computation. Further- 
more, the exploitation of quantum effects may even prove 
beneficial for various kinds of information processing and 
communication. The most prominent examples for this 
are quantum computation and quantum key distribution. 
Quantum computation means in particular cases, in prin- 
ciple, computation faster than any known classical com- 
putation. Quantum key distribution enables one, in prin- 
ciple, unconditionally secure communication as opposed 
to communication based on classical key distribution. 

From a conceptual point of view, it is illuminating to 
consider continuous quantum variables in quantum in- 
formation theory. This includes the extension of quan- 
tum communication protocols from discrete to continu- 
ous variables and hence from finite to infinite dimensions. 
For instance, the original discrete-variable (dv) quan- 
tum teleportation pr otocol for qubits and other finite- 
dimensional systems l|Bennett et all 11993^1 was soon af- 
ter its public ation translated into the continuous- variable 
(cv) setting ijVaidmanl Il994f) . The main motivation to 
deal with continuous variables in quantum information, 
however, originated in a more practical observation: ef- 
ficient implementation of the essential steps in quan- 
tum communication protocols, namely preparing, uni- 
tarily manipulating, and measuring (entangled) quan- 
tum states, is achievable in quantum optics utilizing con- 
tinuous quadrature amplitudes of the quantized electro- 
magnetic field. For example, the tools for measuring 
a quadrature with near-unit efficiency or for displacing 
an optical mode in phase space are provided by homo- 
dyne detection and feed-forward techniques, respectively. 
Continuous- variable entanglement can be efficiently pro- 
duced using squeezed light [where the squeezing of a 
quadrature's quant um fluctuations is due to a nonlinear 
optical interaction ijWalls and Milbu"rnlll994j) ] and linear 
optics. 

A valuable feature of quantum optical implementations 
based upon continuous variables, related to their high ef- 
ficiency, is their unconditionalness. Quantum resources 
such as entangled states emerge from the nonlinear op- 
tical interaction of a laser with a crystal (supplemented 
if necessary by some linear optics) in an unconditional 
fashion, i.e., every inverse bandwidth time. This uncon- 
ditionalness is hard to obtain in dv qubit-based imple- 
mentations based on single-photon states. There, the 
desired preparation due to the nonlinear optical inter- 
action depends on particular (coincidence) measurement 
results ruling out the unwanted (in particular, vacuum) 
contributions in the outgoing state vector. However, the 
unconditionalness of the cv implementations has its price: 
it is at the expense of the quality of the entanglement of 
the prepared states. This entanglement and hence any 



entanglement-based quantum protocol is always imper- 
fect, where the degree of imperfection depends on the 
amount of squeezing of the laser light involved. Good 
quality and performance require large squeezing which is 
technologi cally dem anding, but to a certain extent [about 
10 dB ijWu et all Il986fl ] already state of the art. Of 
course, in cv protocols that do not rely on entanglement, 
for instance, coherent-state based quantum key distribu- 
tion, these imperfections do not occur. 

To summarize at this point: in the most commonly 
used optical approaches, the cv implementations work 
"always" pretty well (and hence efficiently and uncon- 
ditionally), but never perfectly. Their dv counterparts 
only work "sometimes" (conditioned upon rare "success- 
ful" events), but they succeed, in principle, perfectly. A 
similar trade-off occurs when optical quantum states are 
sent through noisy channels (optical fibers), for example, 
in a realistic quantum key distribution scenario. Sub- 
ject to losses, the cv states accumulate noise and emerge 
at the receiver as contaminated versions of the sender's 
input states. The dv quantum information encoded in 
single-photon states is reliably conveyed for each photon 
that is not absorbed during transmission. 

Due to the re cent results of Kn ill, Laflamme, and Mil- 
burn ["KLM", (|Knill et al.Ll200l|) ]. it is known now that 
"efficient" quantum information processing is possible, 
in principle, solely by means of linear optics. Their 
scheme is formulated in a dv setting where the quantum 
information is encoded in single-photon states. Apart 
from entangled auxiliary photon states, generated "off- 
line" without restriction to linear optics, conditional dy- 
namics (feedforward) is the essential ingredient to make 
this approach work. Universal quantum gates such as 
a controlled-NOT can be, in principle, built using this 
scheme without need of any Kerr-type nonlinear optical 
interaction (corresponding to an interaction Hamiltonian 
quartic in the optical modes' annihilation and creation 
operators). This Kerr-type interaction would be hard 
to obtain on the level of single photons. However, the 
"off-line" generation of the complicated auxiliary states 
needed in the KLM scheme seems impractical too. 

Similarly, in the cv setting, when it comes to more ad- 
vanced quantum information protocols, such as universal 
quantum computation or, in a communication scenario, 
entanglement distillation, it turns out that tools more 
sophisticated than only Gaussian operations are needed. 
In fact, the Gaussian operations are effectively those de- 
scribed by interaction Hamiltonians at most quadratic 
in the optical modes' annihilation and creation opera- 
tors, thus leading to linear input-output relations as in 
beam splitter or squeezing transformations. Gaussian op- 
erations, mapping Gaussian states onto Gaussian states, 
also include homodyne detections and phase-space dis- 
placements. In contrast, the non-Gaussian operations 
required for advanced cv quantum communication (in 
particular, long-distance communication based on entan- 
glement distillation and swapping, quantum memory and 
teleportation) are either due to at least cubic nonlinear 
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optical interactions or due to conditional transformations 
depending on non-Gaussian measurements such as pho- 
ton counting. It seems that, at this very sophisticated 
level, the difficulties and requirements of the dv and cv 
implementations are analogous. 

In this Review, our aim is to highlight the strengths 
of the cv approaches to quantum information process- 
ing. Therefore, we focus on those protocols which are 
based on Gaussian states and their feasible manipulation 
through Gaussian operations. This leads to cv propos- 
als for the implementation of the "simplest" quantum 
communication protocols such as quantum teleportation 
and quantum key distribution, and includes the efficient 
generation and detection of cv entanglement. 

Before dealing with quantum communication and com- 
putation, in Sec. ^ we first introduce continuous quan- 
tum variables within the framework of quantum optics. 
The discussion about the quadratures of quantized elec- 
tromagnetic modes, about phase-space representations 
and Gaussian states includes the notations and conven- 
tions that we use throughout this article. We conclude 
Sec. [n] with a few remarks on linear and nonlinear op- 
tics, on alternative polarization and spin representations, 
and on the necessity of a phase reference in cv imple- 
mentations. The notion of entanglement, indispensable 
in many quantum protocols, is described in Sec. II I II in 
the context of continuous variables. We discuss pure and 
mixed entangled states, entanglement between two (bi- 
partite) and between many (multipartite) parties, and 
so-called bound (undistillable) entanglement. The gen- 
eration, measurement, and verification (both theoretical 
and experimental) of cv entanglement are here of partic- 
ular interest. As for the properties of the cv entangled 
states related with their inseparability, we explain how 
the nonlocal character of these states is revealed. This 
involves, for instance, violations of Bell-type inequalities 
imposed by local realism. Such violations, however, can- 
not occur when the measurements considered are exclu- 
sively of cv type. This is due to the strict positivity of 
the Wigner function of the Gaussian cv entangled states 
which allows for a hidden-variable description in terms 
of the quadrature observables. 

In Sec. IIVI we describe the conceptually and practi- 
cally most important quantum communication protocols 
formulated in terms of continuous variables and thus uti- 
lizing the cv (entangled) states. These schemes include 
quantum teleportation and entanglement swapping (tele- 
portation of entanglement), quantum (super)dense cod- 
ing, quantum error correction, quantum cryptography, 
and entanglement distillation. Since quantum telepor- 
tation based on non-maximum cv entanglement, using 
finitely squeezed two-mode squeezed states, is always im- 
perfect, teleportation criteria are needed both for the the- 
oretical and for the experimental verification. As known 
from classical communication, light, propagating at high 
speed and offering a broad range of different frequencies, 
is an ideal carrier for the transmission of information. 
This applies to quantum communication as well. How- 



ever, light is less suited for the storage of information. In 
order to store quantum information, for instance, at the 
intermediate stations in a quantum repeater, more appro- 
priate media than light are for example atoms. Signifi- 
cantly, as another motivation to deal with cv, a feasible 
light-atom interface can be built via free-space interac- 
tion of light with an atomic ensemble based on the al- 
ternative polarization and spin-type variables. No strong 
cavity QED coupling as for single photons is needed. The 
concepts of this transfer of quantum information from 
light to atoms and vice versa, the essential ingredient of 
a quantum memory, are discussed in Sec. IIV.FI 

Section is devoted to quantum cloning with contin- 
uous variables. One of the most fundamental (and his- 
torically one of the first) "laws" of quantu m information 
theory is the so-called no- cloning theorem l)Dieksl Il982t 
IWootters and Zurekl Il982j) . It forbids the exact copying 
of arbitrary quantum states. However, arbitrary quan- 
tum states can be copied approximately, and the resem- 
blance (in mathematical terms, the overlap or fidelity) 
between the clones may attain an optimal value indepen- 
dent of the original states. Such optimal cloning can be 
accomplished "locally", namely by sending the original 
states (together with some auxiliary system) through a 
local unitary quantum circuit. Optimal cloning of Gaus- 
sian cv states appears to be more interesting than that 
of general cv states, because the latter can be mimicked 
by a simple coin toss. We describe a non-entanglement 
based (linear-optics) implementation for the optimal lo- 
cal cloning of Gaussian cv states. In addition, for Gaus- 
sian cv states, also an optical implementation of optimal 
"cloning at a distance" (telecloning) exists. In this case, 
the optimality requires entanglement. The correspond- 
ing multi-party entanglement is again producible with 
nonlinear optics (squeezed light) and linear optics (beam 
splitters). 

Quantum computation over continuous variables, dis- 
cussed in Sec. IVII is a more subtle issue compared to 
the in some sense straightforward cv extensions of quan- 
tum communication protocols. At first sight, continuous 
variables do not appear well suited for the processing 
of digital information in a computation. On the other 
hand, a cv quantum state having an infinite-dimensional 
spectrum of eigenstates contains a vast amount of quan- 
tum information. Hence it might be promising to ad- 
just the cv states theoretically to the task of computa- 
tion (for instance, by discretization) and yet to exploit 
their cv character experimentally in efficient (optical) 
implementations. We explain in Sec. IVII why univer- 
sal quantum computation over continuous variables re- 
quires Hamiltonians at least cubic in the position and 
momentum (quadrature) operators. Similarly, any quan- 
tum circuit that consists exclusively of unitary gates from 
the "cv Clifford group" can be efficiently simulated by 
purely classical means. This is a cv extension of the dv 
Gottesman-Knill theorem where the Clifford group ele- 
ments include gates such as the Hadamard (in the cv case, 
Fourier) transform or the C-NOT (Controlled-Not). The 
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theorem applies, for example, to quantum teleportation 
which is fully describable by C-NOT's and Hadamard (or 
Fourier) transforms of some eigenstates supplemented by 
measurements in that eigenbasis and spin/phase flip op- 
erations (or phase-space displacements). 

we 



Before some concluding remarks in Sec. I Villi 
present some of the experimental approaches to squeez- 
ing of light and squeezed-state entanglement generation 
in Sec. I VI LAI Both quadratic and cubic optical non- 
linearities are suitable for this, namely parametric down 
conversion and the Kerr effect, respectively. Quantum 
teleportation experiments that have been performed al- 
ready based on cv squeezed-state entanglement are de- 
scribed in Sec. IVII.DI In Sec. IVIII we further discuss 
experiments with long-lived atomic entanglement, with 
genuine multipartite entanglement of optical modes, ex- 
perimental dense coding, experimental quantum key dis- 
tribution, and the demonstration of a quantum memory 
effect. 



II. CONTINUOUS VARIABLES IN QUANTUM OPTICS 

For the transition from classical to quantum mechan- 
ics, the position and momentum observables of the parti- 
cles turn into noncommuting Hermitian operators in the 
Hamiltonian. In quantum optics, the quantized electro- 
magnetic modes correspond to quantum harmonic oscil- 
lators. The modes' quadratures play the roles of the os- 
cillators' position and momentum operators obeying an 
analogous Heisenberg uncertainty relation. 



A. The quadratures of the quantized field 

From the Hamiltonian of a quantum harmonic oscil- 
lator expressed in terms of (dimensionless) creation and 
annihilation operators and representing a single mode k, 
Hk = H(dk(a k ak + we obtain the well-known form 
written in terms of 'position' and 'momentum' operators 
(unit mass), 



Hk = ~ (Pt + u 2 k x 2 k ) 



with 
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(wfcife + ipk) , 
(wfeife - ipk) , 



or, conversely, 
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(2) 
(3) 

(4) 
(5) 



Here, we have used the well-known commutation relation 
for position and momentum, 



[XkiPk 1 



ihS, 



kk> 



(6) 



which is consistent with the bosonic commutation rela- 
tions [&k, a\,] — Skk', [fflfc, &k'] — 0. In Eq. ©, we see that 
up to normalization factors the position and the momen- 
tum are the real and imaginary parts of the annihilation 
operator. Let us now define the dimensionless pair of 
conjugate variables, 

Xk = Jttp Xk = Re a k , P k = = — p k = Ima k . (7) 
V 2h ^/2huj k 

Their commutation relation is then 



\x k ,pj\ 



7kk' 



(8) 



In other words, the dimensionless 'position' and 'mo- 
mentum' operators, X k and Pk, are defined as if we set 
h = 1/2. These operators represent the quadratures 
of a single mode k, in classical terms corresponding to 
the real and imaginary parts of the oscillator's complex 
amplitude. In the following, by using (X,P) or equiva- 
lent^ (x,p), we will always refer to these dimensionless 
quadratures playing the roles of 'position' and 'momen- 
tum'. Hence also (x,p) shall stand for a conjugate pair 
of dimensionless quadratures. 

The Heisenberg uncertainty relation, expressed in 
terms of the variances of two arbitrary non-commuting 
observables A and B in an arbitrary given quantum state, 

((Ai) 2 ) = <(i-(i)) 2 ) = (i 2 )-(i) 2 , 
((AS) 2 ) = {{B - (B) f ) = {&)- {B)\ (9) 

becomes 

<(Ai) 2 )((AB) 2 )>i|([i,B])| 2 . (10) 

Inserting Eq. © into Eq. ifTUI) yields the uncertainty re- 
lation for a pair of conjugate quadrature observables of 
a single mode k, 



Xk = (Sfe + a!)/ 2 > Pk = («fc - °l)/2i 



namely, 



((Axk) 2 )((Ap k ) 2 )>-\([£k,Pk])\ 2 



1 
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(11) 



(12) 



Thus, in our scales, the quadrature variance for a vacuum 
or coherent state of a single mode is 1/4. Let us further 
illuminate the meaning of the quadratures by looking at 
a single frequency mode of the electric field (for a single 
polarization), 



E k (r,t) = E [a k e 



i(k-r—uikt) 



+ a\e- l{ ^-^]. (13) 
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The constant Eq contains all the dimensional prefactors. 
By using Eq. we can rewrite the mode as 

E k (r, t) = 2E [x k cos(ui k t - k • r) 

+p k sm(uj k t - k • r)] . (14) 

Apparently, the 'position' and 'momentum' operators 
Xk and pk represent the in-phase and the out-of-phase 
components of the electric field amplitude of the sin- 
gle mode k with respect to a (classical) reference wave 
oc cos(uj k t — k • r). The choice of the phase of this wave 
is arbitrary, of course, and a more general reference wave 
would lead us to the single mode description 

E k (r, t) = 2E [x{ e) cos(w fc i - k ■ r - 6) 

+pf ] sin^fet - k • r - 9)] , (15) 

with the more general quadratures 



t } = (« fe e- e +4e+ ie )/2, (16) 
(6) - (a k e- ie - a\e +ie )/2i . (17) 



Pi 



These "new" quadratures can be obtained from x k and 
Pk via the rotation 



x fe 

-(e) 

Pk 



cos 9 sin Q \ f Xk 
— sin 9 cos & J \ pk 



(18) 



Since this is a unitary transformation, we again end 
up with a pair of conjugate observables fulfilling the 
commutation relation Eq. ijSJ. Furthermore, because 



Pk 



(B) 



.(e+7r/2) 



the whole continuum of quadratures 



is covered by arj^ with 9 € [0, 7r). This continuum 
of observables is indeed measurable by relatively simple 
means. Such a so-called homodyne detection works as 
follows. 

A photodetector measuring an electromagnetic mode 
converts the photons into electrons and hence into an 
electric current, called the photocurrent i. It is there- 
fore sensible to assume i oc n = a* a or i = qa' a with 
q a constant ijPaull fl995h . In order to detect a quadra- 
ture of the mode a, the mode must be combined with an 
intense "local oscillator" at a 50:50 beam splitter. The 
local oscillator is assumed to be in a coherent state with 
large photon number, |cclo)- It is therefore reasonable to 
describe this oscillator by a classical complex amplitude 
«lo rather than by an annihilation operator q,lo- The 
two output modes of the beam splitter, (<2lo+g)/v2 and 
(alo — a) 1^/2 (see Sec. lII.D)) . may then be approximated 
by 

ai = {a LO + a)/V2 , a 2 = (a LO - a)/V2 . (19) 
This yields the photocurrents 



i-2 



it; 



qa[ai = q (a LO + at)(otLo + a)/2 , 
qa\a 2 = q(al Q - a^)(ato - o)/2 . 



(20) 



The actual quantity to be measured shall be the differ- 
ence photocurrent 



Si = ii - i-i = q (al Q a + a L oa ) 



(21) 



By introducing the phase 9 of the local oscillator, «lo — 
| aLO I exp(i9), we recognize that the quadrature observ- 
able x^ from Eq. (|l(jfl is measured (without mode in- 
dex k). Now adjustment of the local oscillator's phase 
9 G [0, 7r] enables the detection of any quadrature from 
the whole continuum of quadratur es x^ . A possibl e way 
to realize quantum tomography ijLeonhardti IIP!)?]) , i.e., 
the reconstruction of the mode's quantum state given by 
its Wigner function, relies on this measurement method, 
called (balanced) homodyne detection. A broadband 
rather than a single-mode description of homodyne detec- 
tion can be found in Ref. l)Braunstein and Crouchl Il99lj) 
(in addition, the influence of a quantized local oscillator 
is investigated there). 

We have seen now that it is not too hard to measure 
the quadratures of an electromagnetic mode. Also uni- 
tary transformations such as quadrature displacements 
(phase-space displacements) can be relatively easily per- 
formed via so-called feed-forward technique, as opposed 
to for example "photon number displacements" . This 
simplicity and the high efficiency when measuring and 
manipulating the continuous quadratures are the main 
reason why continuous- variable schemes appear more at- 
tractive than those based on discrete variables such as 
the photon number. 

In the following, we will mostly refer to the conjugate 
pair of quadratures x k and p k ('position' and 'momen- 
tum', i.e., 9 = and 9 = tt/2). In terms of these 
quadratures, the number operator becomes 



n k = a\a k = x\ + p 2 k 



(22) 



using Eq. (JSJ. 

Let us finally review some useful formulas for the 
single-mode quadrature eigenstates, 



x\x) = x\x) , p\p) =p\p) , 



(23) 



where we have now dropped the mode index k. They are 
orthogonal, 

(x\x') = S(x - x') , (p\ P '} = S(p-p'), (24) 
and complete, 



| a;) (a; | dx = 1L , 



\p)( J? \dp=i. (25) 



As it is known for position and momentum eigenstates, 
the quadrature eigenstates are mutually related to each 
other by Fourier transformation, 



1 



-2ixp 



\p) dp , 



1 f°° 

\p) = -= / e +2ixp \x)dx 

V n J-oc 



(26) 



(27) 
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Despite being unphysical and not square integrable, the 
quadrature eigenstates can be very useful in calculations 
involving the wave functions tJj(x) — (x\ip) etc. and 
in idealized quantum communication protocols based on 
continuous variables. For instance, a vacuum state in- 
finitely squeezed in position may be expressed by a zero- 
position eigenstate \x = 0) = J \p)dp/^/ir. The physical, 
finitely squeezed states are characterized by the quadra- 
ture probability distributions |i/>(a;)| 2 etc. of which the 
widths correspond to the quadrature uncertainties. 

B. Phase-space representations 

The Wigner function as a "quantum phase-space distri- 
bution" is particularly suitable to describe the effects on 
the quadrature observables which may arise from quan- 
tum theory and classical statistics. It partly behaves like 
a classical probability distribution thus enabling to cal- 
culate measurable quantities such as mean values and 
variances of the quadratures in a classical-like fashion. 
On the other hand, as opposed to a classical probability 
distribution, the Wigner function can become negative. 

The Wigner function was originally proposed by 
Wigner in his 1932 paper "On t he quantum co rrection 
for thermodynamic equilibrium" l)Wignerlll932[) . There, 
he gave an expression for the Wigner function in terms of 
the position basis which reads (with x and p being a di- 
mensionless pair of quadratures in our units with h = 1/2 
as introduced in the previous section) ijWignerl ^932) 

W(x,p) = ^- J dye+^yP(x-y\p\x + y) . (28) 

Here and throughout, unless otherwise specified, the in- 
tegration shall be over the entire space of the integra- 
tion variable (i.e., here the integration goes from — oo 
to oo). We gave Wigner's original formula for only one 
mode or one pa rticle [Wigner' s original equation was in 
./V-particle form l)Wignerlll932|) ]. because it simplifies the 
understanding of the concept behind the Wigner function 
approach. The extension to N modes is straightforward. 

Why does W(x,p) resemble a classical-like probability 
distribution? The most important attributes that explain 
this are the proper normalization, 

J W{a)d 2 a = 1 , (29) 

the property of yielding the correct marginal distribu- 
tions, 

J W(x,p) dx = (p\p\p) , J W(x,p) dp = (x\p\x) , (30) 

and the equivalence to a probability distribution in clas- 
sical averaging when mean values of a certain class of 
operators A in a quantum state p are to be calculated, 

(i) = Tr(pi)= / W(a) A(a)d 2 a , (31) 



with a function A(a) related to the operator A. The mea- 
sure of integration is in our case d 2 a = d(Re a)d(lm a) = 
dxdp with W(a = x + ip) = W(x,p), and we will use 
d 2 a and dx dp interchangeably. The operator A repre- 
sents a particular class of functions of a and d^ or x 
and p. The marginal distribution for p, (p\p\p), is ob- 
tained by changing the integration variables (x — y = u, 
x + y = v) and using Eq. (|26J) . that for x, (x\p\x), by 
using J exp(+Aiyp)dp = (jr/2)8(y). The normalization 
of the Wigner function then follo ws from Tr(p) = 1 . 

For any symmetrized operator (Leonhardt, 1997), the 
so-called Weyl correspondence ll WevlL Il950f) . 

Tr[pS(x n p m )] = J W{x,p)x n p m dxdp , (32) 

provides a rule how to calculate quantum mechanical ex- 
pectation values in a classical-like fashion according to 
Eq. (|31|l . Here, S(x n p m ) indicates symmetrization. For 
exa mple, S(x 2 p ) = (x 2 p + xpx + px 2 ) / 3 corresponds to 
x 2 p l)Leonhardd ll997^ 

Such a classical-like formulation of quantum optics in 
terms of quasiprobability distributions is not unique. In 
fact, there is a whole family of distributions P{a, s) of 
which each member corresponds to a particular value of 
a real parameter s, 

P(a,s) = i J x(/3,s) exp(i/3a* +ip*a)d 2 f3 , (33) 

with the s-parametrized characteristic functions 

X(J3, s) = Tr[p exp(-i/3a t - i/3*a)} exp(s|/3| 2 /2) • (34) 

The mean values of operators normally and antinormally 
ordered in a and d^ may be calculated via the so-called P 
function (s = 1) and Q function (s = —1), respectively. 
The Wigner function (s = 0) and its characteristic func- 
tion x(/3; 0) are perfectly suited to provide expectation 
values of quantities symmetric in a and d^ such as the 
quadratures. Hence the Wigner function, though not 
always positive definite, appears to be a good compro- 
mise to describe quantum states in terms of quantum 
phase-space variables such as the single-mode quadra- 
tures. We may formulate various quantum states rele- 
vant to continuous-variable quantum communication by 
means of the Wigner representation. These particular 
quantum states exhibit extremely nonclassical features 
such as entanglement and nonlocality. Yet their Wigner 
functions are positive definite, thus belonging to the class 
of Gaussian states. 



C. Gaussian states 

Multi-mode Gaussian states may represent optical 
quantum states which are potentially useful for quan- 
tum communication or computation purposes. They are 
efficiently producible in the laboratory, on demand avail- 
able in an unconditional fashion. Their corresponding 
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Wigner functions are normalized Gaussian distributions 
of the form (for zero mean) 



W(Q = 1 expi-i^ 

VW (2^)^VdetyW I 2^ 



(35) 



with the 2A-dimensional vector £ having the quadrature 
pairs of all N modes as its components, 



£ = (xi,Pi,x 2 ,P2,—,xn,Pn) 



(36) 
(37) 



and with the 2N x 2N correlation matrix yW having as 
its elements the second moments symmetrized according 
to the Weyl correspondence Eq. 



T^(A&A6 + A&A&)/2] = 



((&6+&&)/2> 



(TV) 



(38) 



where = £j — = £j for zero mean values. The 
last equality defines the correlation matrix for any quan- 
tum state. For Gaussian states of the form Eq. I|35|l . the 
Wigner function is completely determined by the second- 
moment correlation matrix. 

For a classical probability distribution over the clas- 
sical 2 TV-dimensional phase space, every physical corre- 
lation matrix is real, symmetric, and positive, and con- 
versely, any real, symmetric, and positive matrix repre- 
sents a possible physical correlation matrix. Apart from 
reality, symmetry, and positivity, the Wigner correla- 
tion matrix (of any state), describing the quantum phase 
space, must a lso comply with the commutation rel ation 



space, must also comply witn tne commutation reia 
from Eq. © I Simon! booot IWerner and WolJ. l200ll) . 



■A* 



k,l = 1,2,3, ...,2JV 



(39) 



with the 2A x 2A matrix A having the 2x2 matrix J 
as diagonal entry for each quadrature pair, for example 
for N = 2, 



A 



J 
J 



J 



1 

-1 



(40) 



A direct consequence of this commutation relation and 
the non-negativity of the density oper ator p i s the 
following A-mode unc ertainty relation ijSimori l2000t 
IWerner and Woli 1200 ll) . 



y W - _ A > 
4 ~ 



(41) 



This matrix equation means that the matrix sum on the 
left-hand-side has only nonnegative eigenvalues. Note 
that this A-mode uncertainty relation applies to any 
state, not only Gaussian states. Any physical state has 



to obey it. For Gaussian states, however, it is not only 
a necessary conditi on, but it is also suffici ent to ensure 
the positivity of p l|Werner and Wont l200l[) . In the sim- 
plest case N = 1, Eq. I|41l) is reduced to the statement 
detyW > i/i6, which is a more precise and complete 
version of the Heisenberg uncertainty relation in Eq. Ijl2|l . 
For any N, Eq. I|41|) becomes exactly the Heisenberg un- 
certainty relation of Eq. I|12fl for each individual mode, 
if yW is diagonal. The purity condition for an A-mode 
Gaussian state is given by detyW = 1/16^. 



D. Linear optics 

In passive optical devices such as beam splitters and 
phase shifters, the photon number is preserved and the 
modes' annihilation operators are transformed only lin- 
early. This linear-optics toolbox provides essential tools 
for generating particular quantum states and for manip- 
ulating and measuring them. 

A beam splitter can be considered as a four-port device 
with the input-output relations in the Heisenberg picture 



(a[ a' 2 ) T = U(2) (oi a 2 f . 



(42) 



The matrix U(2) must be unitary, U^ 1 {2) = t/ f (2), in 
order to ensure that the commutation relations are pre- 
served, 



[(a^,(a'^] = 0, [a' i ,(a' j y} = 5 i: 



(43) 



This unitarity reflects the fact that the total pho- 
ton number remains constant for a lossless beam split- 
ter. Any unitary transformation actin g on two modes 
can be expressed by the matrix ijBernsteinl Il974t 
~ ~and Aravindt 1 1992ft 



Dana 



U(2) 



e -i(0+5) sin6 
e -i(0+5') cos( 



e cos f 
-e~ lS sin( 



(44) 



An ideal phase-free beam splitter operation is then sim- 
ply given by the linear transformation 



sin t 
cos( 



cos tf 
— sin 6* 



«i 

«2 



(45) 



with the reflectivity and transmittance parameters sin# 
and cos#. Thus, the general unitary matrix describes 
a sequence of phase shifts and phase-free beam splitter 
'rotations', 



U(2) = 



,-i8 









-iS' 



suit 
cos ( 



cos f 
— sin( 







(46) 

Not only the above 2x2 matrix can be decomposed into 
phase shifting and beam splitting operations. Any A x A 
unitary matrix as it appears in the linear transformation 



(47) 
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may be expres sed by a sequence of phase shifters and 
beam splitters l)Reck et aZl 1199^1 . This means that any 
mixing between optical modes described by a unitary ma- 
trix can be implemented with linear optics. In general, 
it does not mean that any unitary operator acting on the 
Hilbert space of optical modes (or a subspace of it) is re- 
alizable via a fixed network of linear optics. Conversely, 
however, any such network can be described by the linear 
transformation in Eq. (|47fl . 

The action of an ideal phase-free beam splitter oper- 
ation on two modes can be expressed in the Heisenberg 
picture by Eq. (|45|) . The input operators are changed, 
whereas the input states remain invariant. The corre- 
sponding unitary operator must satisfy 

(|)=^)(a:)^). (48) 

In the Schrodinger representation, we have correspond- 
ingly p' = B 12 (9)pBl 2 (8) or for pure states, \ip') — 
Bi2{9)\ij)) . Note that Bi2(9) acts on the position eigen- 
states as 

Bu(0)\xi, X2) = \x\ sm.9 + X2 cos 6, x\ cosO — X2 sin 6*) 
= Wi,x' 2 ) . (49) 

In Eq. (|4*9"|l . \xi,x 2 ) = \x\)\x 2 ) = \x\)i ® \x 2 ) 2 which we 
will use interchangeably throughout. The position wave 
function is transformed according to 

V(zi,ar 2 ) -> ip'(x[,x' 2 ) (50) 
= ipix'i sin 9 + x' 2 cos 9, x' x cos 9 — x 2 sin 9) . 

Analogous linear beam-splitter transformation rules ap- 
ply to the momentum wave function, the probability den- 
sities, and the Wigner function. Finally, we note that 
any unitary operator U that describes a network of pas- 
sive linear optics acting upon N modes corresponds to 
a quadratic Hamiltonian such that U = exp(— id 1 * Ha), 
where a = (01, 0,2, a./v) T , — (a\, a 2 , a N ), and H 
is an N x N Hermitian matrix. 



E. Nonlinear optics 

An important tool of many quantum communication 
protocols is entanglement, and the essential ingredient 
in the generation of continuous-variable entanglement is 
squeezed light. In order to squeeze the quantum fluctua- 
tions of the electromagnetic field, nonlinear optical effects 
are needed. This squeezing of optical modes is sometimes 
also referred to as a linear optical process, because the 
corresponding interaction Hamiltonian is quadratic in a 
and a^ which yields a linear mixing between annihilation 
and creation operators in the input-output relations. In 
the previous section, we discussed that a process which 
"truly" originates from linear optics (based only on pas- 
sive elements such as beam splitters and phase shifters) is 



expressed by Eq. (|47|l . Hence it is given by linear input- 
output relations, but it does not involve mixing between 
the a's and a''s. The most general linear transformation 
combining elements from passive linear optics and non- 
linear optics is the so-c alled linear unitary Bogoliubov 
(LUBO) transformation l)Bogoliubovl Il947l) . 

a'i = ^ Aij^j + B lj a f j + 74 , (51) 
3 

with the matrices A and B satisfying the conditions 
AB T = (AB T ) T and AA* = BB^ + i due to the bosonic 
commutation relations for &[. This input-output rela- 
tion describes any combination of linear optical elements 
(multi-port interferometers), multi-mode squeezers, and 
phase-space displacements or, in other words, any inter- 
action Hamiltonian quadratic in a and a*. The LUBO 
transformations are equivalent to the Gaussian transfor- 
mations that map Gaussian states onto Gaussian states. 

In general, squeezing refers to the reduction of quan- 
tum fluctuations in one observable below the standard 
quantum limit (the minimal noise level of the vacuum 
state) at the expense of an increased uncertainty of 
the conjugate variable. In the remainder of this sec- 
tion, we will briefly discuss squeezing schemes involv- 
ing a nonlinear-optical interaction, describable by 
a quadratic interaction Hamiltonian. Others, based on a 
nonlinearity and a quartic Hamiltonian, are among 
the topics of Sec. IVIII 

The output state of degenerate parametric amplifica- 
tion, where the signal and idler frequencies both equal 
half the pump frequency, corresponds to a single-mode 
squeezed state. This effect of single-mode squeezing can 
be calculated with an interaction Hamiltonian quadratic 
in the creation and annihilation operators, 

H mt = ih~ (atV e - a 2 e- ie ) . (52) 

It describes the amplification of the signal mode a at 
half the pump frequency in an interaction picture (with- 
out explicit time dependence due to the free evolution). 
The coherent pump mode is assumed to be classical (the 
so-called parametric approximation), its real amplitude 
l^pumpl is absorbed in k, and the pump phase is 6. 
The parameter n also contains the susceptibility, k oc 
l a pump|- The fully quantum mechanical Hamiltonian 
is H lnt ex a^ 2 a pump — a 2 a pump , and with the parametric 
approximation we assume a pum p — > a pum p = | crumple 
l(Scullv and Zubairvl Il997t) . In the interaction picture, 
we can insert H nlt into the Heisenberg equation of motion 
for the annihilation operator, and obtain (taking zero 
pump phase O = 0) 

— a(t) = i [a(t),H int ] = nat(t). (53) 
at in 

This equation is solved by 

a{t) = a(0) cosh(frf) + a f (0) sinh(Kt) . (54) 
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The quadrature operators evolve correspondingly into 

x(t) = e +Kt 4(0) , p(t) = e~ Kt p(0) . (55) 

This is in fact the expected result. Due to the unitary 
evolution, the uncertainty of the p quadrature decreases, 
whereas that of the x quadrature grows: 



{[Ax(t)f 



-2«i 



([Ax ( 
([Ap^ 



(56) 



Here we have chosen vacuum-state inputs and replaced 
the initial quadratures by those of the vacuum labeled by 
a superscript '(0)'. The evolving states remain minimum 
uncertainty states, but they have p fluctuations below 
and x fluctuations above the vacuum noise level. They 
have become quadrature squeezed states. According to 
the unitary evolution 



U{t,t ) = exp 



to) 



(57) 



with the Hamiltonian from Eq. 152(1 and t — 0, let us 
now introduce the unitary squeezing or squeeze opera- 
tor 5(C) by defining £ = — rexp(iO) with the squeezing 
parameter r = nt (a dimensionless effective interaction 
time) , 



U(t,0) 



exp 



(atV e -a 2 e- i0 )i 



5(C) = exp ['£ a 2 -i at 2 



(58) 



The squeezing operator obviously satisfies <S^(£) = 
5~ 1 (C) = S(—£). Applying it to an arbitrary initial mode 
a(0) = a yields the transformations 

S\()aS(() = acoshr + aV e sinhr , 
5 t (C)a t 5(C) = a* cosh r + ae" jQ sinhr . (59) 

For the rotated mode 

£(©/2) + ipie/2) = p + ip) e -ie/a = a e -ie/a ) (60) 

the squeezing transformation results in 

^(C)[« (e/2) +^ (e/2) ]^(C) = ae-' ie / 2 coshr (61) 

+a f e +»e/2 ginhr 

= P +^(e/2) +ie -p(0/2) . 

Thus, the effect of the squeezing operator on an arbitrary 
pair of quadratures, as generally defined in Eq. I|16fl . is 
the attenuation of one quadrature and the amplification 
of the other. We have seen that the squeezing operator 
effectively represents the unitary evolution due to the 
OPA Hamiltonian. The corresponding expressions for 
the resulting Heisenberg quadrature operators (with © — 
and vacuum inputs), 



as in Eq. I|55|l squeezed in p for t > (r > 0), will prove 
extremely useful for the following investigations. Note 
that time reversal (r < 0) just swaps the squeezed and 
the antisqueezed quadrature. Throughout this article, 
we may always use r > 0, and hence describe a position- 
squeezed mode via the Heisenberg equations 



x(r) 



e~ r xW 



p(r) 



e +rp(0) 



(63) 



where r > 0. The quadrature squeezing, mathemati- 
cally defined through the squeezing operator 5(C) and 
physically associated with the OPA interaction, is com- 
monly referred to as "ordinary" squeezing. Other kinds 
of squeezing will be mentioned in Sec. IVIII 

The Heisenberg equations Eq. I|62|l correspond to a 
squeezed vacuum state, in the Schrodinger representa- 
tion given by the Hilbert vector 5(C) |0) (with O = 0). 
More generally, all minimum uncertainty states are dis- 
placed squeezed vacua, 

\a,0=D(a)S(0\0) , (64) 

with the unitary displacement operator 

D(a) — exp(cm^ — a*a) — exp(2ip a x — 2ix a p) , (65) 

where a — x a + ip a and a = x + ip. The displacement 
operator acting on a (as a unitary transformation in the 
Heisenberg picture) yields a displacement by the complex 
number a, 



b\a)ab{a) =a + , 



(66) 



The position wave function for the displaced position- 
squeezed vacuum is given by 



1/4 



^( X ) = (-) e r/2 exp[-e 2r (a;-a; Q ) 



+2ip a x — ix a p a ] . (67) 



The corresponding Wigner function is then 



W(x,p) 



■exp 



t ) 2 -2e- 2r (p-p a ) 2 



where the quadrature variances here are u x 



and (7 rj 



(68) 

-2r/ 4 



/4. In the limit of infinite squeezing 



r — > oo, the position probability density, |?/;(:z;)| 2 = 
\j2j-Ke r exp [— 2e 2r [x — x a ) 2 } becomes a delta function 
lim e ^o exp[— (a; — x a ) 2 / e 2 ]/ eyjit — 5(x — x a ) with e = 
e _r /v / 2. The squeezed vacuum wave function in that 
limit, il>{x) cx S(x), describes a zero position eigenstatc, 
J dxip(x)\x) oc |0). The mean photon number of an in- 
finitely squeezed state becomes infinite, because for the 
displaced squeezed vacuum we have 



(f) 



sinh 2 r 



(69) 



x{r) 



e +r x^ 



p(r) 



e- r p^ 



(62) using Eq. 
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Later, we will show that the simplest quantum tele- 
portation protocol based on continuous variables utilizes 
two-mode squeezing. The physical process for produc- 
ing a two-mode squeezed state via a nondegenerate op- 
tical parametric amplifier (NOPA) is a generalization of 
the nonlinear interaction involved in degenerate optical 
parametric amplification. The NOPA interaction relies 
on the Hamiltonian 



tAt„;e 



H mt — ihn {a[a 2 e 



-ie 



), 



(70) 



where h\ and d 2 refer to the signal and idler modes emerg- 
ing at two sidebands around half the pump frequency 
and having different polarizations. Here, we still assume 
k cx X^l^pumpl- Mathematically, two- mode squeezing 
may be defined analogously to single-mode squeezing by 
the unitary two-mode squeeze operator 



U(t,0) 



exp 

s(0 



= exp (c* 



— aia2e 
aia 2 



-to 



(a\al 



(71) 



with the same definitions and conventions as above. The 
solution for the output modes, calculated as above for 
single-mode squeezing, is (with = 0) 



a\ sinh r 



a.\(r) — aicoshr 
a 2 (r) — a,2 cosh r + a\ sinh r 



(72) 



These output modes are entangled and exhibit quantum 
correlations between the quadratures. More realistically, 
these correlations cover a finite range of sideband fre- 
quencies. This "broadband two-mode squeezing" will be 
briefly discussed in Sec. lVIII A two-mode squeezed state, 
produced by the NOPA interaction, is equivalent to two 
single-mode squeezed states (with perpendicular squeez- 
ing directions and produced via the degenerate OPA 
interaction or alternatively via a \^ interaction, see 
Sec. IVIIf) combined at a beam splitter ijvan Loock et all 
2000). This equivalence will be explained in Sec. Mil 

We have discussed the generation of squeezed light 
within the framework of nonlinear optics and the ma- 
nipulation of electromagnetic modes by linear optics us- 
ing beam splitters. Squeezers and beam splitters are the 
resources and building components of quantum commu- 
nication protocols based on continuous variables, because 
they represent tools for creating the essential ingredient 
of most of these protocols: continuous-variable entangle- 
ment. 



F. Polarization and spin representations 

The field of quantum information with cv grew out of 
the analysis of quadrature-squeezed optical states. How- 
ever, in order for this field to mature into one yielding a 
usable technology, methods for storing continuous quan- 
tum information will be required. In particular, it seems 
clear that continuous quantum variables which can be 



compatible with the collective state of a set of atomic 
systems will be needed to perform this task. Here we 
briefly discuss a useful alternative encoding for continu- 
ous quantum information in terms of collective spin-like 
variables. 

Optically, we will be interested in encoding the con- 
tinuous quantum information onto the collective Stokes 
(polarization) variables of an optical field. Let a+(t— z/c) 
and a- (t — z / c) be the annihilation operators for circu- 
larly polarized beams of light propagating along the pos- 
itive z-axis. Then the Stokes operators may be defined 
as 

S x = C - / T dr'[a t + (r')a-(r') + a t _(r')a + (r')], 



2 Jo 



dr' [4(r')MO - ol{r')a + (r')] 



S z = 



dr' [aUr')a + (r')-a T _(r')a_(r')] 



(73) 



Given the usual equal-time commutation relations for 
the annihilation operators a±(t, z) as [cii(t, z),dj(t, z')] = 
5ijS(z — z') where i, j = ±, the commutation relations for 
these Stokes operators correspond to those of the usual 
spin operators, namely [Sj,Sk] = itjkiSi. 

Now suppose we restrict our states to those for which 
(S x ) is near its maximum value. In this case, to an excel- 
lent approximation, we may write S x ~ (S x ). For states 
restricted in this manner, the resulting commutation rela- 
tions for S y and S z are an excellent approximation (up to 
rescaling) of the canonical commutation relations for the 
usual phase-space variables x and p. Thus, states with 
near maximum Stokes' polarization correspond to those 
on a patch of phase space with S y and S z playing the 
role of x and p. Taking the state with maximum (S x ) to 
represent the phase-space 'vacuum' state, the whole set 
of usual coherent, squeezed, and cv entangled states may 
be constructed via displacements and squeezing transfor- 
mations based on this operator translation. 

An analogous representation may be constructed for 
the collective spin of a set of N spin-i atoms. Defining 

the collective spin variables as Fi = J2n=i > w ^h 
the usual spin commutation relations we find for the col- 
lective spin variables [Fj, Fk] = iCjkiFi. In a similar man- 
ner, we shall consider states with near maximal polariza- 
tion along the negative z-axis, i.e., states corresponding 
to small variations about |F, —F). Again, for such a sub- 
set of states, the variables F x and F y have commutation 
relations (up to rescaling) which are excellent approxi- 
mations to those of the phase-space variables x and p. 
Thus, within these phase-space patches, we may encode 
continuous quantum information as spin-coherent, spin- 
squeezed etc. states. A coherent spin state would then 
be a minimum uncertainty state that satisfies equality 
in the corresponding Heisenberg uncertainty relation, for 
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instance, according to Eq. QlOfl. 



((AF x f)((AF y f)>-\(F z )f 



(74) 



For a state with mean polarization along the z-axis, 
|(-F Z )| = F-i the "vacuum variance" would correspond to 
((AF X ) 2 ) = ((AFy) 2 ) = F/2. 



G. Necessity of phase reference 

The quantum information of continuous variables is 
stored as phase space distributions. Almost all such dis- 
tributions (and hence quantum states) depend on the 
orientation of the phase-space coordinate frame. Phys- 
ically, this corresponds to a phase of the quantum field 
being used to encode the quantum information. 

Typically, this phase corresponds to a choice of phase 
of the single-mode annihilation operator, via 



e-**a 



(75) 



or equivalently the phase-shift on a single-mode state (or 
wave-function) via 



(76) 



When we measure such states to extract some of their 
quantum information we will typically use phase sensitive 
detection schemes such as homodyne detection. However, 
this entails picking some phase reference. 

In this case, the phase reference comes from a strong 
local oscillator (LO). However, the LO itself has phase 
freedom. So where is this freedom actually tied down in 
any given experiment? 

The trick that has been used for decades is to both 
construct and manipulate the phase-sensitive states from 
the same phase reference that one uses to make the mea- 
surements. Physically, one splits up the LO into several 
pieces each of which controls a different aspect of any 
given experiment. However, so long as each process is 
done within the LO's dephasing time the common phase 
cancels out from the response of the detectors. Thus, 
quantum information with continuous variables involves 
experiments which typically are going to require a phase 
reference. In quantum-optics experiments, for example, 
this LO is just a strong laser beam that is shared amongst 
the various 'parties' (such as sender and receiver) in the 
lab. 

Does the phase reference of the LO correspond to a 
quantum or a classical channel that must be shared be- 
tween users? One can expect that, since multiple copies 
are being used, the resource must actually be relying on 
no more than clonable and hence presumably classical 
information. 

This whole picture is well appreciated by experi- 
mentalists, but has recently led to some discussion 
about the validity o f this paradigm. In particular, 
iRudolph and Sanders! l|200l|) have recently argued that 



since we cannot know the LO's phase (j) (M0 lmerlll997[K 
we should average over it 



PEF 



2tt 



£Pr{d>)\ \a\e-^)(\a\e 



■i<j> I 



2tt 



2tt 



\a\e-^)(\a\e 



I 



(77) 
(78) 
(79) 



where they implicitly took the prior distribution Pr((f>) 
to be uniform. They then argued that the decompo- 
sition of Eq. (|77|l into coherent states, as opposed to 
number states, was not appropriate in interpreting ex- 
periments by invoking the Partition Ensemble Fallacy 
ijKok and Braunstehl |2000|) . 

A number of people ha ve argued against this as 
counter to common s e nse llvan Enk and Fuchsl l2002t 
iGea-B anacloche. 1990; Wiseman and Vaccarol 2001), 
however. iNemoto and Braunsteinl <)2003h noted a flaw in 
the argument of Rudolph and Sanders: although choos- 
ing Pr(4>) as uniform seems eminently reasonable, if (j) is 
truly uno bservable as the y presume and as is generally 
accepted l|Meslmeii Il997|) . then Rudolph and Sanders' 
choice of Prior is untestable. Indeed, any choice of Pr(cj)) 
would lead to completely equivalent predictions for all 
possible experiments. The implications of this are that 
states of the form Eq. I|77|l actually form an equivalence 
class — any member of which may be chosen to represent 
the class. One of these members is just a coherent state. 
Thus, the conventional experimental interpretation falls 
out and the long-standing interpretations do not in fact 
involve any fallacy. 



III. CONTINUOUS-VARIABLE ENTANGLEMENT 

Historically, the notion of entanglement ("Ver- 
schrankung") appeared explicitly in the literature first 
in 1935, long before the dawn of the relatively young 
field of quantum information, and without any reference 
to dv qubit states. In fact, the entangled states treated 
in this paper by Eins tein, Podolsky, and Rosen ["EPR", 
IjEinstein et all . Il935|) ] were two-particle states quantum 
mechanically correlated with respect to their positions 
and momenta. Although important milestones in quan- 
tum information theory have been derived and expressed 
in terms of qubits or dv, the notion of quantum entan- 
glement itself came to light in a continuo us- variable set- 
ting. 1 Einstein, Podolsky, and Rosen ijEinstein et all 
1935) considered the position wave function ip(xi,X2) = 
C 8{x\ — X2 — u) with a vanishing normalization constant 



1 more explicitly, th e notion of entanglement was introduced by 
ISchrodingerl il935l) . inspired by the EPR paper. 



12 



C. Hence the corresponding quantum state, 



dxidx2 tp{xi, X2) \xi, x%) oc / dx \x, x — u) , (80) 



describes perfectly correlated positions {x\ — X2 = u) 
and momenta (total momentum zero, p\ + P2 = 0), but 
this state is unnormalizable and unphysical. However, it 
can be thought of as the limiting case of a regularized 
properly normalized version where the positions and mo- 
menta are correlated only to some finite extent given by 
a (Gaussian) width. Such regularized versions are for ex- 
ample two-mode squeezed states, since the position and 
momentum wave functions for the two-mode squeezed 
vacuum state are l)Leonhardtill997|) . 



ip(xx,x 2 ) 



ip{pi,P2) 



exp[-e~ 2r {x 1 +2:2)72 
-e+ 2r ( Xl -x 2 ) 2 /2], 

exp[-e- 2r (p 1 -p 2 ) 2 /2 

-e+ 2r ( Pl +p2) 2 /2], (81) 



out either mode of the Wigner function in Eq. (|82() , we 
obtain the thermal state 



dx 1 d Pl W(0 



tt(1 + 2n) 



exp 



2{x 2 +p 2 ) 



1 + 2n 



(84) 



with mean photon number fi = sinh 2 r. Instead of the cv 
position or momentum basis, the two-mode squeezed vac- 
uum state may also be written in the discrete (though, of 
course, still infinite-dimensional) photon number (Fock) 
basis. Applying the two-mode squeeze operator with 
6 = 0, as defined in Eq. (|7T)l . to two vacuum modes, 
we obtain the following expression, 



5(C)|00) 



|00) 



tanh r d d, 



/ 1 



a\a\-\-al l a2 + l 



\ cosh r 

OO 

VT^Aj] A" /2 |7i)|n) 

n=0 



(85) 



approaching C 5{x\ — X2) and C 5{p\ +P2) respectively in 
the limit of infinite squeezing r — > 00. The correspond- 
ing Wigner f unction of the two-mode squeezed vacuum 
state is then dBellL 11964 jBraunstein and Kimblel Il998al 



Walls and Milburn, 199 



w(0 



exp{-e-^[(a;i + x 2 ) 2 + (pi - P2) 2 ] 
-e+ 2r [{x 1 -x 2 ) 2 + {p l +P2?]} 



(82) 



with £ = (xi,pi,X2,p2)- This Wigner function ap- 
proaches C 5{x\ — X2)5{pi + P2) in the limit of infinite 
squeezing r — > 00, corresponding to the original (per- 
fectly correlated and maximally enta ngled, but unphysi- 
cal) EPR state (lEinstein et adll935D . From the Wigner 
function, the marginal distributions for the two positions 
or the two momenta are obtained by integration over the 
two momenta or the two positions, respectively, 



d Pl d P2 W(0 = \Tp(xx,X2)f 



(83) 



- exp[-e ' 2r (xx + x 2 ) 2 - e +2r (xi - x 2 )'% 

7T 

d Xl dx 2 w(o = m P i, P 2)\ 2 

- exphe- 2 ^ - p 2 ) 2 - e +2r ( Pl + p 2 ) 2 ]. 



Though having well defined relative position and total 
momentum for large squeezing, the two modes of the 
two-mode squeezed vacuum state exhibit increasing un- 
certainties in their individual positions and momenta as 
the squeezing grows. In fact, upon tracing (integrating) 



where A = tanh r. In the sec ond line here, w e have used 
the disentangling theorem of IColletd Evm . The form 
in Eq. I|85|l reveals that the two modes of the two-mode 
squeezed vacuum state are also quantum correlated in 
photon number and phase. 

The two-mode squeezed vacuum state, as produced 
by the unitary two-mode squeeze operator in Eq. (|T1|) 
corresponding to the NOPA interaction Hamiltonian in 
Eq. (|70|l . is equivalent to the two-mode state emerging 
from a 50:50 beam splitter with two single- mode squeezed 
vacuum states at the input. The simplest way to see this 
is in the Hciscnberg representation. A single-mode vac- 
uum state squeezed in p as in Eq. I|59|) with = 0, 



a 1 



coshr + aS '^ sinh 



and another one squeezed in x, 



«2 



a 2 °^ cosh r — a 2 °^ sinh r , 



(86) 



(87) 



are combined at a 50:50 beam splitter, 

h = (ai + a 2 )/V2 

= coshr + b 2 sinh r 



(«i 



('2 



= S 2 °^ coshr + sinhr 



where b\ 



(0) 



i(0) 



)/V2 and b 



(0) 



(a 



(o) -(o) 



a 9 



] )/V2 



are again two vacuum modes. The resulting state is 
a two-mode squeezed state as in Eq. (|72|l with vac- 
uum inputs. The quadrature operators of the two- mode 
squeezed vacuum state can be written as 



+r~(0) 



;.(<») 
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Pi = (e- r pf ] +e +r p^)/V2, 
x 2 = (e+ r x^ - e~ r x^)/V2, 
P2 = (e-^ 0) -e+^ 0) )/v^, (89) 

where here = Xk+ipk and al°^ = xf 1 + ipf\ Whereas 
the individual quadratures xy. and p^ become very noisy 
for large squeezing r, the relative position and the total 
momentum, 

rz _ r „(0) 
x\ — X2 = Vie x 2 , 

Pl +p 2 = V2e- r pf\ (90) 

become quiet, ((x\ — x 2 ) 2 ) = e~ 2r /2 and ((pi + p 2 ) 2 ) = 
e- 2r /2. 

The two-mode squeezed vacuum state is the quantum 
optical representative for bipartite continuous-variable 
entanglement. In general, we may refer to cv en- 
tanglement whenever the entangled states are denned 
in an infinite-dimensional Hilbert space, for instance, 
that of two discrete quantized modes having position- 
momentum and number-phase quantum correlations. 
The Gaussian entangled states are then an important 
subclass of the cv entangled states. More general results 
on the creation of bipartite G a ussian cv e ntanglement 
were presented by I Wolf et all l(2003l) and IKraus et all 
1120031) . 

Complementary to its occurrence in quantum optical 
states, let us illuminate the notion of cv entanglement 
and, in particular, the entanglement of Gaussian states 
from the perspective and with the tools of quantum infor- 
mation theory. This leads to a rigorous definition of en- 
tanglement, necessarily given in the Schrodinger picture 
as a property of composite state vectors or, more gener- 
ally, density operators. The link between this definition 
and the typical measurable quantities in a cv implemen- 
tation, namely the Gaussian moments of the quadratures, 
is provided by cv inseparability criteria or EPR-type non- 
locality proofs, which are expressed in terms of the ele- 
ments of the second-moment correlation matrix for the 
quadrature operators. We begin with the entanglement 
shared by only two parties. 



A. Bipartite entanglement 

1. Pure states 

Bipartite entanglement, the entanglement of a pair of 
systems shared by two parties, is easy to handle for pure 
states. For any pure two-party state, orthonormal bases 
of each subsystem exist, {|m„)} and so that the 

total state vector can be w ritten in the "Schmidt decom- 
position" llSchmidtLll90l as 



where the summation goes over the smaller of the di- 
mensionalities of the two subsystems. The Schmidt coef- 
ficients c n are real and non-negative, and satisfy J2 n c n 
1 . The Schmidt decomposition may be obtained by trans- 
forming the expansion of an arbitrary pure bipartite state 
as 

W) = y^a m fc|ra)|fc) = u mn c nn v kn \m)\k) 

mk nmk 

= 5Z C »K)K> . ( 92 ) 

n 

with c nn = c n . In the first step, the matrix a with com- 
plex elements a m k is diagonalized, a — ucv T , where u 
and v are unitary matrices and c is a diagonal matrix 
with non-negative elements. In the second step, we de- 
fined \u n ) = J2 m u mn\m) and \v n ) = J2k v kn\k) which 
form orthonormal sets due to the unitarity of u and v 
and the orthonormality of \m) and \k). A pure state 
of two d-level systems ( "qudits" ) is now maximally en- 
tangled when the Schmidt coefficients of its total state 
vector are all equal. Since the eigenvalues of the reduced 
density operator upon tracing out one half of a bipartite 
state arc the Schmidt coefficients squared, 

Pi = Tr 2/ 5i2 = Tt2\i>)ii(i>\ = ^c 2 |u„)i(u„| , (93) 

n 

tracing out either qudit of a maximally entangled state 
leaves the other half in the maximally mixed state 1L /d. 
A pure two-party state is factorizable (not entangled) if 
and only if the number of nonzero Schmidt coefficients 
("Schmidt rank") is one. 

A unique measure of bipartite entanglement for pure 
states is given by the partial von Neumann entropy, 
the von Neumann entropy [S(p) = — Trplog/5] of 
the r emaining system after tracing out either subsys- 
tem l)Bennett et all . Il9 96a): Ev.N. = ~Trpi^og d pi — 
-Trp 2 log d p 2 = -En c n lo Sd c n> ranging between zero 
and one (in units of "edits"), with Tv 2 pi 2 = p±, Tripi 2 = 
p 2 . It corresponds to the number of maximally entangled 
states "contained in a given pure state" . For example, 
■Ev.n. = 0.4 means that asymptotically 1000 copies of 
the state can be transformed into 400 maximally entan- 
gled states via deterministic state transformations using 
local operations and classi cal communication (LOCC) 
ijNielsen and ChuaneL l2000j) . 

According to Eq. JSSJ, the Fock basis corresponds to 
the Schmidt basis of the two-mode squeezed vacuum 
state. In this Schmidt form, we can quantify the en- 
tanglement of the two-mode squee zed vacuum sta te via 
the partial von Neumann entropy l|van Enk i 11999ft . 

£v.n. = -log(l-A)-AlogA/(l-A) (94) 
= cosh 2 r log(cosh 2 r) — sinh 2 r log(sinh 2 r) . 



W) = ^2c n \u n )\v n ) , 

n 



(91) 



Note that any pure two-mode Gaussian state can be 
transformed into the canonical two-mode squeezed state 
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form via local LUBO transformations and hence its en- 
tanglement can be quantified as in Eq. (|94|l . More gener- 
ally, any bipartite pure multi-mode Gaussian state cor- 
responds to a product of two- mode squeezed states up to 
local LUBO transfo rmations ijBotero and Reznfkl l2003t 
iGiedke et all 12003a). In addition, the partial von Neu- 
mann entropy of a pure two-mode Gaussian state, cor- 
responding to the entropy of an arbitrary si ngle-mode 
Gaus sian state, can be also directly computed ll A gar wall 

mzi. 

In general, an important sign of entanglement is the 
violation o f inequalities imposed by local realistic theories 
ijBelll Il964|) . Any pure two-party state is entangled if 
and only if, for suitably chosen observables, it yields a 
violation of such inequalities. The main features of pure- 
state bipartite entanglement shall be summarized by 

entangled 4=> Schmidt rank > 1, 

entangled -<=>■ partial von Neumann entropy > , 

entangled 4=> violations of local realism. 

(95) 

All these conditions are necessary and sufficient. 



2. Mixed states and inseparability criteria 

The definition of pure-state entanglement via the non- 
factorizability of the total state vector is generalized to 
mixed states through non-separability (or inseparability) 
of the total density operator. A general quantum state 
of a two-party system is separable if its total density 
operator is a m ixture (a convex sum) of product states 
llWernerl.lT989T). 

P12 = ^ViPi,i ® Pi,2 ■ (96) 

i 

Otherwise, it is inseparable. 2 In general, it is a non- 
trivial question whether a given density operator is sep- 
arable or inseparable. Nonetheless, a very convenient 
method to test for insepara bility is Peres' partial trans- 
pose criterion ijPeresl ^96) . For a separable state as in 
Eq. I|96l) . transposition of either density matrix yields 



2 Separable states also exhibit correlations, but those are purely 
classical. For instance, compare the separable state p = 
i(|0)(0|<gi|0}(0| + |l)(l|i8>|l)(l|) to the pure maximally entangled 
"Bell state" |$+) = ^(|0)®|0)+|1)®|1)) = ^(|+)®|+>+|->® 
|— )) with the conjugate basis states |±) = "^jdO) i The 
separable state p is classically correlated only with respect to the 
predetermined basis {|0), |1)}. However, the Bell state \& + ) is a 
priori quantum correlated in both bases {|0}, |1)} and {|+), |— )}, 
and may become a posteriori classically correlated depending on 
the particular basis choice in a local measurement. Similarly, the 
inseparability criteria for continuous variables must be expressed 
in terms of positions and their conjugate momenta. 



again a legitimate non-negative density operator with 
unit trace, 

Pi2 =5]^(/Sm) T «>P j , 2 , (97) 

i 

since (f>i,i) T = (pi.i)* corresponds to a legitimate den- 
sity matrix. This is a necessary condition for a separable 
state, and hence a single negative eigenvalue of the par- 
tially transposed density matrix is a sufficient condition 
for inseparability (transposition is a so-called positive, 
but not completely positive map, which means its ap- 
plication to a subsystem may yield an unphysical state 
when the subsystem is entangled to other subsystems). 
In general, for states with arbitrary dimension, negative 
partial transpose (npt) is only sufficient for inseparability 
l|Horodecki et allll996aj) . Similarly, for arbitrary mixed 
states, the occurrence of violations of inequalities im- 
posed by local realism is also only a su fficient, but no t 
a necessary condition for inseparability ll Werner! ]l989). 
To summarize, for general mixed-state bipartite insepa- 
rability, the following statements hold, 

inseparable <= npt, 

inseparable violations of local realism. 

(98) 

However, there are classes of states where negative partial 
transpose becomes both necessary and sufficient, namely 

2x2 — dimensional, inseparable 4=> npt, 
2 x 3 — dimensional, inseparable 4=> npt, 
(1 x N) — mode Gaussian, inseparable npt. 

(99) 

Other sufficient inseparability criteria include viola- 
tions of an entropic inequalit y [Ey.N.fPi) > -E V N.(/3i2) , 
again with pi = Tr 2 pi2] l|Horodecki et all [l996b), 
and a condition based on the theory of majorization 
l|Nielsen and KemneL l200lh . In the context of bound 
entanglement and distillabi lity, the so-called reduction 
inseparability criterion ijHorodecki and FforodeckH Il999j) 
proves very useful (see below). 

In Eq. H99fl . we made a statement about the insepa- 
rability of Gaussian states in terms of the partial trans- 
pose criterion. What does partial transposition applied 
to bipartite Gaussian or, more generally, cv states ac- 
tually mean? Due to the Hermiticity of a density op- 
erator, transposition corresponds to complex conjuga- 
tion. Moreover, as for the time evolution of a quan- 
tum system described by the Schrodinger equation, com- 
plex conjugation is equivalent to time reversal, ihd/dt — > 
—iHd/dt. Hence, intuitively, transposition of a den- 
sity operator means time reversal, or, in terms of cv, 
sign change of the momentum variables. This obser- 
vation and its application t o the insepar ability prob- 
lem of cv states is due to ISimonl l|2000() . Thus, in 
phase space, transposition is described by £ T — > T£ T = 
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(xi,-pi,x 2 ,~P2, ■■■,x N ,-p N ) T , i.e., by transforming 
the Wigner function W(x\,px, X2,P2, %n,Pn) —> 
W(xi,—pi,X2,—P2,---,xn,—Pn)- This general transpo- 
sition rule for cv is in the case of Gaussian states as in 
Eq. reduced to V (N ^> -► rV^'r (where the first 
moments are not relevant to the separability properties, 
since they can be eliminated via LOCC). 

Expressing partial transposition of a bipartite Gaus- 
sian system by T a = T H (where A B means the 
block-diagonal matrix with the matrices A and B as di- 
agonal 'entries', and A and B are respectively 2N x 2N 
and 2M x 2M square matrices applicable to N modes 
at a's side and M modes at 6's side), the condition 
that the partially transposed Gaussian state described 
by T a V( N+M *>T a is unphysical [see Eq. gTJ], 



r o ^+A0r o jtl A , 



(100) 



is sufficient for the inseparabil ity between a and b ijSimori 
l2000HWerner and Wolil20Qll) . For Gaussian states with 
N = M = 1 l|Simonl 1200(1) and for those with N = 1 
and arbitrary M ((Werner and WoHl feoOlf) . this condi- 
tion is necessary and sufficient. The simplest example 
where the condition is no longer necessary for insepara- 
bility involves two modes at each side, N — M = 2. 
In that case, states with positive partial transpose, so- 
call ed bound entangled Gau ssian states (see below), ex- 
ist ijWerner and Woll . 12001). For the general bipartite 
N x M case of Gaussian states, there is also a nec- 
essary and sufficient condition: the correlation matrix 
y(N+M) correS p 0nc i s to a separable state iff a pair of 

correlation matrices Vg N ^ and V h 
dWerner and Worll200lD 



(M) 



exists such that 



V (N+M) > y(N) e y 



(M) 



(101) 



Since it is in general hard to find such a pair of corre- 
lation matrices Va N ^ and v£ M ' for a separable state or 
to prove the non-existence of such a pair for an insepa- 
rable state, this criterion in not v ery practical. A mor e 
practical solution was proposed bv lGiedke et all (|200ldl . 
The operational criteria for Gaussian states there, com- 
putable and testable via a finite number of iterations, are 
entirely independent of the npt criterion. They rely on 
a nonlinear map between the correlation matrices rather 
than a linear one such as the partial transposition, and in 
contrast to the npt criterion, they witness also the insep- 
arability of bound entangled states. Thus, the separabil- 
ity problem for bipartite Gaussian states with arbitrarily 
many modes at each side is completely solved. 

Let us now consider arbitrary bipartite two-mode 
states. According to the definition of the TV-mode corre- 
lation matrix V^ N ' in Eq. 1)38(1 ■ we can write the correla- 
tion matrix of an arbitrary bipartite two-mode system in 
block form, 



A C 
C T B 



(102) 



where A, B, and C are real 2x2 matrices. Simon's cv 
version of the Pe res-Horodecki partial transpose criterion 
reads as follows llSimonl 12000). 



det A det B 



1 
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detCIJ - Tr (AJC J BJC T J) 

> — (det A + det B) , 

(103) 

where J is the 2x2 matrix from Eq. I)40[l. Any sepa- 
rable bipartite state satisfies the inequality of Eq. (|103fl . 
so that it represents a necessary condition for separa- 
bility, and hence its violation is a sufficient condition 
for inseparability. The inequality Eq. (|103fl is a conse- 
quence of the fact that the two-mode uncertainty rela- 
tion, Eq. (|41|) with N = 2, is preserved under partial 
transpose, W(x 1 ,p 1 ,x 2 ,p 2 ) -> W(x 1 ,p 1 ,x 2 ,~p 2 ), pro- 
vided the state is separable. 

We may now define the following two standard forms 
for the correlation matrix: 



(2) 



a 





c 








a 





d 


c 





b 








d 





6 



(104) 



and 



(2) 



II 



/ ai ci 

a 2 c 2 

ci bi 

V c 2 b 2 



(105) 



where the elements of the second standard form V, 
isfy 

ai - 1/4 Q2—1/4 
b[ - 1/4 _ b 2 - 1/4' 

|ci|-|ca| = V(ai-l/4)(6i-l/4) 



(2) 
II 



sat- 



-y/(a 2 - l/4)(6 2 - 1/4) . (106) 
Any correlation matrix can be transformed into the first 

(2) 

standard fo rm Vj via ap propriate local canonical trans- 
formations ijSimorl 2000) [ i.e., via local LUBO's with the 
LUBO given in Eq. (|51[)]. From the first standard form 

(2) 

Vj , two appropriate local squeezing operations can al- 
ways l ead to the second standard form Vjf ijDuan et all 
2000B- 

(2) 

For the standard form Vj , the necessary separability 
condition of Eq. (|103fl simplifies to 

16(ab - c 2 )(ab - d 2 ) > (a 2 + b 2 ) + 2\cd\ - — . (107) 

16 

Simon's criterion does not rely on that specific standard 
form and can, in fact, be applied to an arbitrary (even 
non-Gaussian) state using Eq. (|103fl . For Gaussian two- 
mode states, however, Eq. (|103fl turns out to be both 
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a necessary a nd a sufficient condition for separability 
<|Simontl2000|) . 

A similar inseparability criterion, applicable to two- 
mode continuous- variable systems and expressed in terms 
of an inequality for certain variances involv ing; position 
and mo mentum operators, was derived by iDuan et all 
(2000b) using a strategy independent of the partial trans- 

(2) 

pose. This criterion relies upon the standard form Vjj 
to follow through as a necessary and sufficient condition 
for two-mode Gaussian states. Expressed in terms of the 

(2) 

elements of Vjj , the necessary and sufficient condition 
for the separability of two-mode Gaussian states reads 



((Au) 2 ), 



(108) 



where 



a xi - 


\ci\a 




aoPi - 


C2 . 




\c 2 \a 






1/4 jb 2 - 


1/4 


Vai- 


1/4 V «2 " 


- 1/4' 



(109) 



and the bipartite state of interest p has been labeled p. 
Without the a ssumption of Gaussi an states, an alterna- 
tive approach l|Duan et all l2000til . solely based on the 
Heisenberg uncertainty relation of position and momen- 
tum and on the Cauchy-Schwarz inequality, leads to an 
inequality similar to Eq. l|108l) . It only represents a nec- 
essary condition for the separability of arbitrary states, 



((Auf) p + ((Avf) p > fi a |<[zi,fc]> P | + K[s 2 ,iy>,|/fi 

2 + 2a 2 ' 



(110) 



with 



\a\xi - ^i 2 , 
a 

\a\px + \p 2 - 
a 



(111) 



Here, a is an arbitrary nonzero real parameter. Let us 
also mention that a sim ilar (but we aker) inseparability 
criterion was derived bv iTanl (^99), namely the neces- 
sary condition for any separable state, 



{{Auf) p {(Avf) p > 



(112) 



with a = 1 in Eq. 1|111|) . It is simply the product ver- 
sion of the sum condition in Eq. i|110fl (with a — 1). A 
generalization of the se two-party separability conditions 
can be found in Ref. ijGiovannetti et a7L 120031. including 
a discussion on how they are related with each other. In 
this respect, defining the general linear combinations 



let us only note here that for any separable state, we have 

((Au) 2 ) p + ((Avf) p > (\h l9l \ + \h 2 g 2 \)/2 , (114) 

whereas for a potentially entangled state, this bound is 
changed to 

((Auf) p + ((Av) 2 ) p > (\h m + h 2 g 2 \)/2 . (115) 

The hi and gi are arbitrary real parameters. When choos- 
ing, for instance, h\ = —h 2 = g\ = g 2 = 1, the bound 
for a separable state becomes 1, whereas that for an en- 
tangled state drops to zero. In fact, with this choice, 
u = xi — x 2 and v = pi + p 2 , quantum mechanics al- 
lows the observables u and v to simultaneously take on 
arbitrarily well defined values because of the vanishing 
commutator 



[xi - x 2 ,pi +p 2 ] = 



(116) 



All the inseparability criteria discussed above are ful- 
filled by the two-mode squeezed vacuum state for any 
nonzero squeezing. For example, according to Eq. I|82|) 
and Eq. (|35|) . its correlation matrix is given by 



y( 2 ) 



cosh2r sinh2r 

cosh 2r — sinh 2r 

sinh2r cosh2r 

— sinh 2r cosh 2r 



( 2 ) 

This matrix is in standard form V) . Hence one can 
easily verify that Simon's separability condition Eq. I|107f) 
is violated for any r > 0. Even simpler is the application 
of Eq. I|90fl for the two-mode squeezed vacuum state to 
the condition in Eq. 1110|) which is also violated for any 
r > 0. 

Separability conditions similar to those above can be 
derived also in terms of the polarization Stokes operators 
fromEa. lT73l llBowen et a/.Ll2002HKorolkova et a/ll2002t 
iKorolkova and LoudonL |2003|) . Thereby, in general, one 
must take into account the operator-valued commutator 
of the Stokes operators, [Sj,Sk] = itjkiSi- Analogously, 
a possible sum condition in terms of the collective spin 
variables of two atomic ensembles [see Eq . (1741 1. always 



(117) 



satisfi ed for separable systems, is (jKuzmich and Polzikl 
120031) 



[A(F X 



+ F x2 )Y) P 

>\{hx) P \ 



([A(F yl + 

-|<^2>p|. 



F, 



y2) 



(118) 



hxxi + h 2 x 2 



gwi + g 2 p 2 



Note that in contrast to the conditions in Eq. IjllOl) or 
Eq. (|114f> . the condition in Eq. I|118|) has, in general, a 
state-dependent bound due to the operator-valued com- 
mutator [Fj, Fk] = iejkiFi. However, as discussed in 
Sec. III.FI within the subset of states with a large clas- 
sical mean polarization along the z-axis, the commu- 
(113) tators of F x and F y resemble those of x and p. One 
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may choose two spins with opposite classical orientation, 
(F zl ) = -(F z2 ) = F, yielding 



[A(F xl + F x2 )] 2 ) p + ([A(F yl + F y2 )] 2 ) p > 2 F 



(119) 



With this choice, and using F Z j ~ (F Z j), j = 1,2, the 
vanishing commutator 

[4i + £a, F„i + F y2 ] = i(F zl + F z2 ) = , (120) 

permits an arbitrarily large violation of Eq. (|1 lfj|> for en- 
tangled states. Similar to Eq. (|110|l . where (for a = 1) 
the bound is four vacuum units corresponding to uncor- 
rected quadratures of the two modes, entanglement is 
present according to Eq. 1)119(1 when the total spin vari- 
ances are smaller than those of uncorrelated atoms in 
two collective "vacuum states", each with ((AF X ) 2 ) = 
((AFy) 2 ) = F/2 [see Eq. O]. 

As for the quantification of bipartite mixed-state en- 
tanglement, there are various measures available such 
as the entanglement o f formation (EoF) and distillation 
l|Bennett et all Il996cj) . Only for pure states do these 
measures coincide and equal the partial von Neumann en- 
tropy. In general, the EoF is hard to comp ute. However, 
apart from the qubit case l)WoottersUl998|L also for sym- 
metric two-mode Gaussian states given by a correlation 
matrix in Eq. I|1(J4|) with a — b, the EoF can be calcu- 
lated v ia the total variances in Eq. (|110f> ijGiedke et all. 
20031 3). A Gaussi an version of the EoF was proposed by 
Wolf et all l)2004|) . Another computable measure of en- 
tanglement for any mixed state of an arbitrary bipartite 
system, including bipartite Gaussian states, is the "loga- 
rithmic ne gativity" based on the neg ativity of the partial 
transpose ijVidal and Werneil l2002j) . 



B. Multipartite entanglement 

Multipartite entanglement, the entanglement shared 
by more than two parties, is a subtle issue even for 
pure states. In that case, for pure multi-party states, 
a Schmidt decomposition does not exist in general. The 
total state vector then cannot be written as a single sum 
over orthonormal basis states. Let us first consider dv 
multipartite entanglement. 



1. Discrete variables 

There is one very important representative of multipar- 
tite entanglement which does have the form of a multi- 
party Schmidt decomposition ., namely the Greenberge r- 
Horne-Zeilinger (GHZ) state ijGreenbereer et all . ll990|) 



|GHZ) = - 7 =(|000) + |111)) 



(121) 



here given as a three-qubit state. Although there is no 
rigorous definition of maximally entangled multi-party 



states due to the lack of a general Schmidt decomposi- 
tion, the form of the GHZ state with all "Schmidt coef- 
ficients" equal suggests that it exhibits maximum multi- 
partite entanglement. In fact, there are various reasons 
for assigning the attribute "maximally entangled" to the 
A-party GHZ states, (|000 ■ - ■ 000) + | 111 ■ • • 111))/V2. 
For example, they yield the maximum violations of 
multi- party inequalities imposed by local rea l istic the- 
ories llGisin and Bechmann-Pasauinucci Il998l iKlvshkol 
H99fllMermmi 11990ft . Further, their entanglement heav- 
ily relies on all parties, and, if examined pairwise, they do 
not contain simple bipartite entanglement (see below). 

For the case of three qubits, any pure and fully entan- 
gled state can be trans formed to either t he GHZ state or 
the so-called W state i|Dur et all l2000b|) . 

|W) = -±= (|100) + |010) + |001)) , (122) 

via stochastic local operations and classical communica- 
tion ("SLOCC", where stochastic means that the state 
is transformed with non-zero probability). Thus, with 
respect to SLOCC, there are two inequivalent classes of 
genuine tripartite entanglement, represented by the GHZ 
and the W state. Genuinely or fully tripartite entangled 
here means that the entanglement of the three-qubit state 
is not just present between two parties while the remain- 
ing party can be separated by a tensor product. Though 
genuinely tripartite, the entanglement of the W state is 
also "readily bipartite". This means that the remaining 
two-party state after tracing out one party, 

1 



Tn|W)(W| = -(|00)(00| + |10)(10| + |01)(01| 



-|01)<10| + |10)(01|) 



(123) 



is inseparable which can be verified by taking the partial 
transpose [the eigenvalues are 1/3, 1/3, (l±v / 5)/6]. This 
is in contrast to the GHZ state where tracing out one 
party yields the separable two-qubit state 



Tn|GHZ)(GHZ| = - (|00)(00| + |11)(11|) 



(124) 



Maximum bipartite entanglement is available from the 
GHZ state through a local measurement of one party in 
the conjugate basis {|±) = (|0) ± ll))/-^} (plus classical 
communication about the result), 



|±)n(±|GHZ) 
(±|GHZ)|| 



± 



(125) 



Here, 1$*) are two of the four Bell states, = (|00) ± 

|11))/^,|*±) = (|01)±|10))/V2. 

What can be said about arbitrary mixed entangled 
states of more than two parties? There is of course an im- 
mense variety of inequivalent classes of multi-party mixed 
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states, e.g., five classes of three-qubit states of which 
the extreme cases are the fully separable, ^ r\i pi t \ ® 
Pi.2 © Pi.z, a nd the genuinely tripartite inseparable states 
llDur etal\ . \lMV\$\ . 

2. Genuine multipartite entanglement 

By using the term genuine multipartite entanglement, 
we refer to states where none of the parties can be sepa- 
rated from any other party in a mixture of product states. 
In general, multi-party inseparability criteria cannot be 
formulated in such a compact form as for two parties. In 
order to verify genuine A-party entanglement, one has to 
rule out any possible partially separable form. In princi- 
ple, this can be done by considering all possible bipartite 
splittings (or groupings) and, for instance, applying the 
npt criterion. Moreover, the quantification of multipar- 
tite entanglement, even for pure states, is still subject of 
current research. Violations of multi-party inequalities 
imposed by local realism do not necessarily imply genuine 
multi-party inseparability. The following statements hold 
for pure or mixed multipartite entangled states (both dv 
and cv), 

partially entangled <^= violations of N — party 

Bell — type inequalities, 

genuinely 4^ 
multipartite entangled " " " (126) 

An example for the last statement is the pure genuinely 
TV-party entangled state 

|V;) =cosa|00---0)+sina|ll---l) , (127) 

which for sin 2a < 1/V2 N ~^ d oes n ot violate any 
A-party Bell inequality l|Bellt Il9fi4) . if N odd, 
and does not violate Mermin-Klyshko inequalities 
ilGisin and Bechmann-Pasauinuccilll998tlKlvshkdll993t 
lMermirill990|) for any N. Genuine multipartite entangle- 
ment can be verified only v ia sufficiently large violations 
l|Seevinck and Uffinkt l200lf) of Mermin-Klyshko inequal- 
ities. Another sufficient condition for the genuine TV- 
party entanglement o f an A-qubit state p exists, namely 
(GHZ|p|GHZ) > 1/2 (ISeevinck and Uffink, 2001). 

3. Separability properties of Gaussian states 

As for the cv case, the criteria bv lGiedke et al\ (|2001dj) 
determine to which of five possible classes of fully and 
partially separable, and fully inseparable states a three- 
party three-mode Gaussian state belongs. Hence genuine 
tripartite entanglement if present can be unambiguously 
identified. The classification is mainly based on the npt 
criterion for cv states. For three-party three-mode Gaus- 
sian states, the only partially separable forms are those 
with a bipartite splitting of 1 x 2 modes. Hence already 
the npt criterion is necessary and sufficient. 



The classification of trip artite three-mode Gaussian 
states l|Giedke et al.U2001cf . 

class 1 : ^ 3) ^A,^ 3 >^A,^^A, 

class2 : V™ > j A , V™ t 1 A , f \ A , 

classS: V™ > \ A , V™ > \ A , V™ £ { A , 

class 4 or 5 : V {3) > - A , K (3) > - A , K (3) > - A , 

(128) 

— (3) 

is solely based on the npt criterion, where Vj = 

FjV^'Tj denotes the partial transposition with respect 
to one mode j. In classes 2 and 3, any permutation 
of modes (k, m, n) must be considered. Class 1 cor- 
responds to the fully inseparable states. Class 5 shall 
contain the fully separable states. A Gaussian state 
described by is fully separable iff one-mode cor- 

relation matrices V[ , vJj , and Kj exist such that 

y(3) > v} 1] © y 2 (1) © V P- In general, fully separable 
quantum states can be written as a mixture of tripar- 
tite product states, YliViPiA ® Pi,2 ® Pi, 3- I n class 2, 
we have the one-mode biseparable states, where only one 
particular mode is separable from the remaining pair of 
modes. This means in the Gaussian case that only for 
one particular mode k, > V fc © Vmn with some 

(2) 

two-mode correlation matrix Vmn and one-mode correla- 
tion matrix V^ 1 ^. In general, such a state can be written 
as J2i Vi Pi.k © Pi.mn for one mode k. Class 3 contains 
those states where two but not three bipartite splittings 
are possible, i.e., two different modes k and m are sepa- 
rable from the remaining pair of modes (two-mode bisep- 
arable states). The states of class 4 (three-mode bisep- 
arable states) can be written as a mixture of products 
between any mode 1, 2, or 3 and the remaining pair 
of modes, but not as a mixture of three-mode product 
states. Obviously, classes 4 and 5 are not distinguishable 
via the npt criterion. An additional criterion for this 
disti nction of class 4 and 5 Gaussian states is given in 
Ref. llGiedke et all 12001 J) , deciding whether one-mode 

correlation matrices V^\ v£ 1 , and V3 exist such that 
y(3) > vl 1] © V 2 {1) © For the identification of gen- 

uinely tripartite entangled Gaussian states, only class 1 
has to be distinguished from the rest. Hence the npt 
criterion alone suffices. 

What about more than three parties and modes? Even 
for only four parties and modes, the separability issue 
becomes more subtle. The one-mode bipartite splittings, 
J2i Vi Pi,klm © Pi,n, can be tested and possibly ruled out 
via the npt criterion with respect to any mode n. In 

the Gaussian language, if Vn^ ^ | A for any n, the 
state cannot be written in the above form. Since we con- 
sider here the bipartite splitting of 1 x 3 modes, the npt 
condition is necessary and sufficient for Gaussian states. 
However, also a state of the form J2i Vi Pi,M © Pi.mn 
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leads to negative partial transpose with respect to any 
of the four modes when the two pairs (k,l) and (m,n) 
are each entangled. Thus, npt with respect to any indi- 
vidual mode is necessary but not sufficient for genuine 
four-party entanglement. One has to consider also the 
partial transposition with respect to any pair of modes. 
For this 2x2 mode case, however, we know that en- 
tangle d Gaussian states with positive partial transpose 
exist ijWerner and Wold . l200lj) . But the npt criterion 
is still sufficient for the inseparability between any two 
pairs. As for a ne cessary and sufficient condition, one 
can use those from iGiedke et In any case, 

in order to confirm genuine four-party or even TV-party 
entanglement, one has to rule out any possible partially 
separable form. In principle, this can be done by consid- 
ering all possible bipartite splittings (or groupings) and 
applying either the npt criterion o r the stronger oper- 
ational criteria from lGiedke et al\ (l2001cft . Although a 
full theoretical characterization including criteria for en- 
tanglement classification has not been considered yet for 
more than three parties and modes, the presence of gen- 
uine multipartite entanglement can be confirmed, once 
the complete 2TV x 2TV correlation matrix is given. 



4. Generating entanglement 

In this section, we discuss how to generate genuine mul- 
tipartite cv entanglement of arbitrarily many modes from 
finitely squeezed sources. The resulting states are non- 
maximally entangled due to the finite squeezing. How 
measurements onto the maximally entangled basis of ar- 
bitrarily many modes can be performed with linear optics 
and homodyne detections will be shown in the next sec- 
tion. 

Let us consider a family of genuinely TV-party en- 
tangled cv states. The members of this family are 
those states that emerge from a particular sequence 
of TV — 1 phase-free beam s plitters ( "TV-splitter" ) with 
TV sq ueezed-state inputs ijvan Loock and Braunsteirl 
l2000a|) . The recipe for the generation of these states 
stems from the quantum circuit for creating qubit GHZ 
states. 

Let us consider the generation of entanglement be- 
tween arbitrarily many qubits. The quantum circuit shall 
turn TV independent qubits into an TV-partite entangled 
state. Initially, the TV qubits shall be in the eigenstate 
|0). All we need is a circuit with the following two el- 
ementary gates: the Hadamard gate, acting on a single 
qubit as 



10) 



1 



(129) 



and the controlled-NOT (C-NOT) gate, a two-qubit op- 
eration acting as 



|00) — , |00) , |01) — |01), 
|10)— ►111), |H)— » |10). 



The first qubit (control qubit) remains unchanged under 
the C-NOT. The second qubit (target qubit) is flipped 
if the control qubit is set to 1, and is left unchanged 
otherwise. Equivalently, we can describe the action of the 
C-NOT gate by \yi,y 2 ) -> \yi,Vi ©2/2) with y l7 y 2 = 0,1 
and the addition modulo two ®. The TV-partite entangled 
output state of the circuit (see Fig.^l is the TV-qubit GHZ 
state. 

Let us transl ate the qubit quantum circuit to c ontin- 
uous variables l(van Loock and Braunsteirl |2Q00a) . For 
this purpose, it is convenient to consider position and 
momentum eigenstates. We may replace the Hadamard 
by a Fourier transform, 



1 r°° 

•^1^) position 7= / ^ ^|y)position 

V 7 *" J -00 

— \p — x) momentum ) 



(131) 



and the C-NOT gates by appropriate beam splitter op- 
erations. 3 The input states are taken to be zero-position 
eigenstates \x — 0). The sequence of beam splitter oper- 
ations Bjk (0) is provided by a network of ideal phase- free 
beam splitters (with typically asymmetric transmittancc 
and reflectivity) acting on the position eigenstates of two 
modes as in Eq. (|49p. 

Now we apply this sequence of beam splitters (making 
an "TV-splitter"), 



S JV _ 1A r(7r/4)B A r_ 2A r_ 1 [sin" 1 l/y/Ej 

X ■ ■ ■ X B l2 (sin -1 1/Vn) , (132) 



to a zero- momentum eigenstate \p — 0) oc J dx \x) of 
mode 1 (the Fourier transformed zero-position eigen- 
state) and TV — 1 zero-position eigenstates \x = 0) in 
modes 2 through TV. We obtain the entangled TV-mode 
state J dx \ ). This state is an eigenstate with 

total momentum zero and all relative positions Xi~x.j = 
= 1, 2, . . . , TV). It is clearly an analogue to the qubit 
GHZ state with perfect correlations among the quadra- 
tures. However, it is an unphysical and unnormalizable 
state. Rather than sending infinitely squeezed position 
eigenstates through the entanglement-generating circuit, 
we will now use finitely squeezed states. 

In the Heisenberg representation, an ideal phase-free 
beam splitter operation acting on two modes is described 
by Eq. (|45H . Let us now define a matrix Bki(0) which is 
an TV-dimensional identity matrix with the entries Ikk, 
Ikh Ilk, and In replaced by the corresponding entries of 



(130) 



3 A possible continuous- variable generalization of the C-NOT gate 
is |:ci,a:2) — > |£i,a:i +2:2), where the addition modulo two of 
the qubit C-NOT, |j/i,j/2> -* \yi,Vl ©2/2> with 2/1,5/2 = 0, 1, has 
been replaced by the normal addition. However, for the quantum 
circuit here, a beam splitter operation as described by Eq. 1491 
is a suitable substitute for the generalized C-NOT gate. 
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C-NOT 



FIG. 1 Quantum circuit for generating the TV-qubit GHZ 
state. The gates (unitary transformations) are a Hadamard 
gate ("ff") and pairwise acting C-NOT gates. 



the beam splitter matrix in Eq. 145|) . Thus, the matrix 
for the TV-splitter becomes 



U(X) = U s i v (sin 1 -^=j Bat_2W-i ^sin 1 



x 73, 2 sin 



1 



(133) 



The entanglement-generating circuit is now applied to TV 
position-squeezed vacuum modes. In other words, one 
momentum-squeezed and TV — 1 position-squeezed vac- 
uum modes are coupled by an TV-splitter, 



( a\ a' 2 ■■■ a' N ) T — U(N) ( a\ a 2 ■■■ (ijv ) T 
where the input modes are squeezed according to 



(134) 



a% = coshria^ -(-sinhria^ 
a, = cosh^a- ^ — sinhraa^ 



(135) 



with i = 2,3, ...,N. In terms of the input quadratures, 
we have 



xi 

J, j 



r 2 -(0) 



Pi 
Pi 



(136) 



for a,j = Xj + ifij (j = 1,2, ...,TV). The correlations be- 
tween the output quadratures are revealed by the arbi- 
trarily small noise in the relative positions and the total 
momentum for sufficiently large squeezing r\ and r 2 , 



<(3fe 



Pn) 



/2, 
= Ner 2ri /4 



(137) 



for k ^ I (k,l = 1,2,..., N) and a' k = x' k + ip' k . Note 
that all modes involved have zero mean values, thus the 
variances and the second moments are identical. 

The output states from Eq. 1134(1 are pure TV-mode 
states, totally symmetric under interchange of modes, 
and they retain the Gaussian character of the input 
states. Hence they are entirely described by their second- 



moment correlation matrix, 



/ a 
b 



y W = - 
4 



c U 

d 

a 

d b 
c 

d d b 



a 



(138) 



where 



V 2 - + ^le— 



b = 



N 
1 



N 



N N 



1 



(139) 



For squeezed vacuum inputs, the multi-mode output 
states have zero mean and their Wigner function is of the 
form Eq. (|35|l . The particularly simple form of the cor- 
relation matrix in Eq. (|138f) is, in addition to the general 
correlation matrix properties, symmetric with respect to 
all modes and contains no intermode or intramode x-p 
correlations (hence only the four parameters a, 6, c, and 
d appear in the matrix). However, the states of this form 
are in general biased with respect to x and p (a =/= b). 
Only for a particular relation between the squeezing val- 
ues (r -] , r 2 ) ijvan LoockLl2002tlvan Loock and Braunsteinl 
2003), 



„±2ri _ 



(N-l) 



x sinh 2r2 



(140) 



(N — l) 2 sinli 2r 2 



± 1 



the states are unbiased (all diagonal entries of the cor- 
relation matrix equal), thus having minimum energy 
at a given degree of entanglement or, in other words, 
max imum entang l ement for a given mean photon num- 
ber llBowen et alJ. l2003at). The other TV- mode states of 
the fa mily ijvan Loockll2002t l van Loock and Brauns tein . 
|2003|) can be converted into the minimum-ene r gy stat e 
via local squeezing operations ijBowen et all . l2003a|) . 
Only for N = 2, we obtain r = r\ = r%. In this 
case, the matrix y W reduces to that of a two-mode 
squeezed state which is the maximally entangled state 
of two modes at a given mean energy with the corre- 
lation matrix given in Eq. i|117|) . For general N, the 
first squeezer with r\ and the N — 1 remaining squeezers 
with r 2 have different squeezing. In the limit of large 
squeezing (sinh2r9 ~ e +2r2 /2), we obtain approxim ately 
ijvan LoockL 120021 Ivan Loock and BraunsteinL |2003|) 



(AT-l)e 



+2r 2 



(141) 



We see that in order to produce the minimum-energy 
TV-mode state, the single ri-squeezer is, in terms of the 
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squeezing factor, TV— 1 times as much squeezed as each r%- 
squeezer. However, also in this general TV-mode case, the 
other TV-mode states of the family can be converted into 
the minimum-energy state via local squeezing operations. 

Why is the TV-mode state described by the correla- 
tion matrix in Eq. I(138|l genuinely TV-partite entangled? 
Simple arguments suffice already to confirm this. One 
such argument is that the Wigner function of the N- 
mode state is not even partially factorizable. Neither the 
Wigner function of a single mode nor that of a group of 
modes can be factored out from the total Wigner func- 
tion. This argument depends on the purity of the TV- 
mode state, since the Wigner function of a mixed and 
only classically correlated state is not factorizable either. 
The TV-mode state described by Eq. (|138[) is indeed pure, 
because it is built from TV pure single-mode states via 
linear optics. Apart from its purity, taking into account 
also its total symmetry, the presence of any kind of (par- 
tial) entanglement pr oves the genuine T V-partite entan- 
glement of the state (van Loockl |2002). For example, 
according to Eq. I|138|) . upon tracing out all modes ex- 
cept one, the remaining single-mode correlation matrix 
satisfies det > 1/16 for any TV and any n > or 
r-2 > 0. The remaining mode is then in a mixed state, 
thus proving its entanglement with at least some of the 
other modes. Hence due to the purity and symmetry, the 
total state is genuinely TV-partite entangled. Note that 
this holds true even for n > and r-i — 0. Thus, only 
one squeezed state suffices to make genuine TV-partite en- 
tangle ment via linear optics ijvan Loock and Braunsteiri 
l2000aD . For three parties and modes, TV = 3, checking 
the npt criterion is simple too. One has to apply transpo- 
sition only with respect to each mode 1,2, and 3, in order 
to rule out any partially separable form J2i "Hi Pi,k®pi,mn- 
Due to the symmetry, npt with respect to mode 1 is suf- 
ficient (and necessary) for the genuine tripartite entan- 
glement. The resulting three-mode state belongs to the 
fully inseparable class 1 in Eq. ^ 128(1 . 

The separability properties of mixed versions of the 
three-mode state in Eq. (|138|) with TV = 3, having the 
same correlation matrix contaminated by some noise, 
VJioisy = + /iH/4 are more subtle. In that case, 
for given squeezing r = r± = r% > 0, the state be- 
comes three-mode biseparable [class 4 in Eq. (|128|l ] above 
some threshold value /uo, ^ > //o > 0, and fully separa- 
ble [class 5 in Eq. 1128111 above som e greater value /xi, 
A* > Mi > Mo (|Giedke et all l2001c| . Note that due to 

(3) 

symmetry, the state described by V^ a ( can only belong 
to the classes 1, 4, and 5. Classes 4 and 5 are not distin- 
guishable via partial transpose, but the full separability 
(class 5) is proven iff one-mode correlation matrices V x , 
K (1) , and VP exist such that V^L > VP 8 VP ® VP 

■ . noisy — i £ o 

IjGiedke et qZ.Ll2001d|) . In particular, for fi > 1, we have 



VP = V 2 (L> = V^ L > = 1/4, thus confirming the full sep- 
arability of the state in that case. 

How do the "GHZ-like cv states" described by 
Eq. (|138fl behave compared to the qubit GHZ states? 



r(l) 



For finite squeezing, they actually behave more like 
the qubit W state in Eq. I|122|) rather than the 
maximally entangled qubit GH Z state in Eq. 11211) 
ijvan Loock and Braunsteiri l2003|) . For three parties, for 
instance, bipartite two-mode mixed-state ent anglement is 
readi l y available upon tracing out one m ode l|van Loockl 
l2002t Ivan Loock and Braunsteiri l2003|) [see also the very 
recent results on Ga ussi an multipartite entanglement by 
lAdesso et all l)2004j) and lAdesso and IUuminatl l|2004h ]. 



5. Measuring entanglement 

Rather than generating entangled states, another im- 
portant task is the measurement of multi-party entan- 
glement, i.e., the projection onto the basis of maximally 
entangled multi-party states. For qubits, it is well-known 
that this can be achieved simply by inverting the above 
entanglement-generating circuit (F ig.^). A simil ar strat- 
egy also works for d- level systems ijDusekl 12001'). 

For creating continuous-variable entanglement, we re- 
placed the C-NOT gates in Fig. ^ by appropriate beam 
splitter operations. The same strategy, after invert- 
ing the circuit in Fig. ^ also enables one to measure 
continuous- variable entanglement. In other words, a pro- 
jection onto the "continuous-variable GHZ basis" can be 
performed by applying an inverse TV-splitter followed by a 
Fourier transform of one mode an d by subsequently mea- 
suring the positions of all modes ijvan Loockl 12002'). The 
simplest example is the cv Bell measurement, needed, for 
instance, in cv quantum teleportation (see Sec. lIV.A^I . It 
can be accomplished by using a symmetric beam splitter 
and detecting the position of one output mode and the 
momentum of the other output mode. 

We see that the requirements of a "Bell state 
analyzer" and, more generally, a "GHZ state ana- 
lyzer" for continuous variables are easily met by cur- 
rent experimental capabilities. This is in contrast to 
the Bell and GHZ state an a lyzer f or photonic qubits 
llvan Loock an d Liitkcnhaus, 120041 iLiitkenhaus et all 
ll999UVaidman and Yoraml Il999|) ] Although arbitrarily 
high efficiencies can be approached, in principle, using 
linear optics, photon number detectors, and feedforward, 
one would need sufficiently many, highly entangled aux- 
iliary photons and det ectors resolving correspo ndingly 
large photon numbers Ipusekl l200ll iKnill et a/1. 12001). 
Neither of these requirements is met by current technol- 
ogy. Of course, the C-NOT gates of a qubit Bell and 
GHZ state measurement device can, in principle, be im- 
plemented via the cross Kerr effect using nonlinear optics. 
However, on the single-photon level, the required optical 
nonlinearities are hard to obtain. 

The efficient and unconditional generation of (mul- 
tipartite) entanglement, though nonmaximum for fi- 
nite squeezing, and the simple and feasible linear-optics 
schemes for measuring "maximum (multipartite) cv en- 
tanglement" demonstrate the power of quantum optical 
entanglement manipulation based on cv. However, the 
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capabilities of such purely cv based schemes, which rely 
exclusively on Gaussian operations such as beam split- 
ting, homodyne detection, and squeezing, are not unlim- 
ited. This is revealed, in particular, by the No-Go results 
for cv entanglement distillation (see Sec. IIV.E|) . 



C. Bound entanglement 

There are two big issues related with composite mixed 
quantum states: the separability and the distillability is- 
sue. The former was subject of the previous sections. 
For cv, the separability problem is, in general, not com- 
pletely solved yet. In the special case of Gaussian states, 
however, we mentioned that necessary and sufficient in- 
separability criteria (different from the npt criterion) for 
bipartite states of arbitrarily many modes exist. The sit- 
uation is similar with regard to distillability. The distill- 
ability of general cv states is an open question, whereas 
that of bipartite Gaussian states with arbitrarily many 
modes is completely characterized by the partial trans- 
pose criteri on: any N x M Gauss ian state is distillable 
iff it is npt l|Giedke et aZ.l l2001blcfl . A state is distillable 
if a sufficiently large number of copies of the state can 
be converted into a pure maximally entangled state (or 
arbitrarily close to it) via local operations and classical 
comm unication. Entangleme nt distillation (or "purifica- 
tion" ijBennett et all Il996b|) ) is essential for quantum 
communication when the two halves of a supply of en- 
tangled states are distributed through noisy channels, 
distilled, and subsequently used, for instance, for high- 
fidelity quantum teleportation. 

In general, any inseparable state with positive partial 
transpose cannot be distilled to a maximally entangled 
state, thus representing a so-called bound entangled state 
l|Horodecki et al\ .\l998). In other words, npt is necessary 
for distillability. Is it in general sufficient too? There are 
conjectures that this is not th e case and that undistil- 
lable (bound) np t states exist ijDiVincenzo et a/1 l200fi 
iDiir et QZll2000a|) . On the other hand, any state pi2 that 
satisfies the so-called reduction criterion, pi <g> ll — p\% ^ 
or H. (g> ji>2 — P12 ^ 0, wh ere /5i = Tr^Pii etc., is both insep - 
arable and distillable ijHorodecki and Horodeckl ll999). 
The reduction criterion is sufficient for distillability, but 
it wa s shown not to be a necessary condition ijShor et all 
l200l|) . The known criteria for distillability are summa- 
rized by the following statements, 



general states, distillable 



npt 



general states, distillable <= p\ ® H. — pn 
a a a a a 

Gaussian states, distillable -<=>■ npt (142) 

Boun d entangled npt Gauss ian states do definitely not 
exist llGiedke et flJ.ll2001blcD . Hence the set of Gaussian 
states is fully explored, consisting only of npt distillable, 



ppt entangled (undistillable) , and separable states. The 
simplest bound entangled Gaussian states are those with 
two modes at each s ide, N = M = 2 . Explicit examples 
were constructed bv I Werner and Wold l|200l|) . An exam- 
ple for tripartite bound entangled states are the Gaus- 
sian three- mode states of class 4 in Eq. H128J) . These 
states are ppt with respect to any of the three modes, 
but nonetheless entangled. Unfortunately, the distilla- 
tion of npt Gaussian states to maximally entangled finite- 
dimensional states, though possible in principle, is not 
very feasible with current technology. It relies upon non- 
Gaussian operations (see Sec. lIV.E|l . As for the existence 
of generic bound entanglemen t of non-Gaussian cv states, 
examp les were discussed by jH^rp decki and Lewensteinl 
(2000;) and lHorodecki et all l|200lD . 



D. Nonlocality 

We mentioned earlier that the notion of entangle- 
ment was int r oduce d in 1935 by Schrodi nger in his reply 
(ISchrodingerl Il935|) to the EPR paper l|Einstein et all . 
119351) . The EPR argument itself, based on the cv entan- 
gled state in Eq. H8()(l . already contained as an essential 
ingredient the notion of nonlocality. More precisely the 
reasoning behind the EPR paradox relies upon two major 
assumptions: firstly, there is something like an objective 
reality, and secondly, there is no action at a distance. 
Objective reality becomes manifest "if without in any 
way disturbing the system, we can predict with certainty 
the value of a physical quantity, then there exists an ele- 
ment of physical reality corresponding to this quantity." 
Now two particles sharing the entangled state of Eq. I|8U|) 
are perfectly correlated in their positions and momenta. 
Measuring say the position of one particle means that the 
result obtainable in a subsequent position measurement 
of the other particle can be predicted with certainty. If 
there is no action at a distance, this prediction is made 
without disturbing the second particle. Hence, due to 
EPR's realism, there must be a definite predetermined 
position of that particle. The same arguments apply to 
the momenta, leading also to a definite predetermined 
momentum for the second particle. Since quantum the- 
ory does not allow for such states of definite position and 
momentum, EPR conclude that the quantum mechani- 
cal description is incomplete. Similar to the inseparabil- 
ity criteria for continuous-variable states, which need to 
be expressed in terms of position and momentum, also 
EPR's conclusion (local realism implies incompleteness 
of quantum theory) crucially depends on the presence of 
correlations in both conjugate variables. Hence, as dis- 
cussed earlier, the nature of these correlations must be 
quantum rather than classical. 

Later, in 1964, by extending the EPR program John 
Bell showed that nonlocality can be revealed via the con- 
straints that local realism impo ses on the s tatistics of two 
physically separated systems ijBelll Il964|) . These con- 
straints, expressed in terms of the Bell inequalities, can 
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be violated by quantum mechanics. There are then three 
possible conclusions that can be drawn when inequalities 
imposed by local realism are violated: the correlations 
of the relevant quantum state contradict locality or real- 
ism or both. What is today loosely called "nonlocality" 
includes these three alternatives. 

As for a demonstration of this nonlocality, several 
quantum optical experiments have been performed. The 
first detection of violations of Bell- type inequalit i es was 
based on dv two-pho ton states ijAspect et al 
lOu and Mandel ^88). These states are analogous to 
the spin-entangled sta tes used by B ohm in his dv version 
of the EPR paradox ijBohmL Il95l|) . Such single-photon 
based dv experiments rely on photon counting. 



1. Traditional EPR-type approach 

A quantum optical cv experiment more reminiscent to 
the original EPR paradox and distinct from tests of Bell 
inequalities was that by Ou et al. based on the quan- 
tum correlations of position and mome ntum in a two- 
mode squeezed state l|Ou et all ll992albT) . There, the ex- 
perimentally determined quantities were the quadrature 
variances of one mode conditioned upon the results ob- 
tainable in quadrature measurements of the other mode 
( "inferred variances" ) . This quantum optical demonstra- 
tion of the original EPR paradox was based on a proposal 
by Reid who extended the EPR scenario to the case of 
finite qua ntum correla tions using the inferred quadrature 
variances l|Reidl . Il989]) . 



and similarly for [Varf nf ] r 



Var*L„j with x 



Varf nf ee Var (oti - x^) = Var (f x - g x x 2 ) 

= {{xi - g x x 2 ) 2 ^ - {xi - g x x 2 ) 2 , (143) 

where xf 1 = g x x 2 is the inferred estimate of mode's 1 
position i\ based on the scaled readout x\ st of mode's 
2 position x 2 . The scaling parameter g x may then be 
chosen optimally in order to ensure the most accurate 
inference. The smaller the deviation of x° st from the true 
values Xi, the better x\ may be determined at a distance 
by detecting x 2 . On average, this deviation is quantified 
by Var^f. Similarly, one can define Var? nf , the inferred 
variance for the momentum, with x — > p throughout. 
By calculating dVaxf nf /dg x = 0, we obtain the optimal 
scaling factor 



f-J.r 



\XlX 2 ) 



\Xl){X 2 ) 



Var(i 2 ) 



(A£iA:r: 2 ) 
Var(i 2 ) 



(144) 



with Aii ee Xi — (xi). For the momentum, we have corre- 
spondingly g p = (ApiAp 2 )/V&i(p 2 ). With these scaling 
factors, the optimal (minimal) value for the inferred vari- 
ance becomes 



[Varf r 



infjmin 



Var(ii 



1 - 



(AfiAf 2 ) 2 
Var(xi)Var(a;2) 



throughout in Eq. (|145f) . The minimal inferred variances 
are also referred to as conditional variances Var^ ond and 
Var£ ond , a measure for the noise degrading the otherwise 
perfect correlations between the two modes. 

Following the EPR program and assuming now that 
the two modes 1 and 2 are spatially separated, but also 
that there is no action at a distance, one would have to 
assign to mode 1 predetermined values for x\ and f>\ up 
to, on average, some noise Varf nf and Var? nf respectively. 
Thus, if this leads to a state where x\ and p\ are defined 
to accuracy of 



Varf nf Varf nf < 1 , 



(146) 



a contradiction to the Heisenberg uncertainty relation 
Eq. I|12l) would occur. In fact, the "EPR condition" in 
Eq. (|146l) is satisfied with the two-mode squeezed (vac- 
uum) state for any nonzero squeezing r > 0, since its 
correlation matrix in Eq. (|117fl using Eq. I|145[) yields 
the conditional variances 



Var" 



Var p = 

cond 4cosh2r 



(147) 



(145) 



The optimal scaling factors to ensure the best inference 
and hence to fulfill Eq. H14fi(l for any nonzero squeezing 
are g x = tanh2r and g p — — tanh2r. 

Apparently, "EPR nonlocality" as given by Eq. I|146|) 
and inseparability as indicated by a violation of Eq. I|112|) 
are equivalent for pure Gaussian states such as two-mode 
squeezed states. In general, however, EPR non locality is 
only a sufficient l|Kim et all l2002t iReidl. l200lf) and not 
a necessary condition for inseparability. This is not dif- 
ferent from the relation between inseparability and the 
nonlocality as expressed by violations of Bell inequali- 
ties. As mentioned earlier, except for pure states, en- 
tanglement does not automatically imply "Bell nonlo- 
cality", but the converse holds true in general. For in- 
stance, the qubit Werner states are mixed states which 
can be insepara ble without vio lating any (non-collective) 
Bell inequality IjWernerl Il989[) . Hence the two formally 
distinct approaches of EPR and Bell nonlocality lead 
both to criteria generally stricter than those for insep- 
arability. Due to this similarity and th e fact that the 
EPR concept, initially designed for cv l)Einsteine£_aj. , 
Il935j), was later translated into the dv domain fBohm, 
1951), one may ask whether the concept of Bell non - 
locality, originally derived in terms of dv ijBelll Il964[) . 
is completely describable in terms of cv too. Bell ar- 
gued that the original EPR state directly reveals a local 
hidden- variable description in terms of position and mo- 
mentum, since its Wigner function is positive everywhere 
and hence serves as a cla ssica l prob ability distribution 
for the hidden variables ({Belli . Il987|) . Thus, attempts 
to derive homodyne-based cv violations of Bell inequal- 
ities for the two-mode squeezed state with its positive 
Gaussian Wigner function must fail. However, whether 
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the (for pure-state entanglement always present) non- 
locality is uncovered depends on the observables and 
the measurements considered in a specific Bell inequal- 
ity and not o nly on the quantum state it s elf. In fact, it 
was shown bv iBanaszek and Wodkiewic A (Il998|) how to 
demonstrate the nonlocality of the two-mode squeezed 
vacuum state: it vi olates a Clauser-Horn e-Shimony-Holt 
(CHSH) inequality (jClauser et all [1969) when measure- 
ments of photon number parity are considered. 

2. Phase-space approach 

Following Bell ()Belill987() . an always positive Wigner 
function can serve as the hidden-variable probability 
distribution with respect to measurements correspond- 
ing to any linear combination of x and p. In this 
sense, one will not obtain a violation of the CHSH in- 
equality for the two-mode squeezed state Wigner func- 
tion of Eq . (1821) w hen restricted to such measurements 
({Banaszek and Wodkiewiczl Il998|) . The same applies to 
the always positive Wigner function of the Gaussian N- 
party entangled iV-mode state with correlation matrix 
given by Eq. (|138fl . Thus, in order to reveal the nonlo- 
cality of these Gaussian states, non-Gaussian measure- 
ments, which are not only based upon homodyne detec- 
tion, must be considered. 

For their analysis using photon number parity mea- 
surements, Banaszek and Wodkiewicz exploited the fact 
that the Wigner function is proportional to the quan- 
tum expectation value of a displaced parity operator 
(Banaszek and W6dkiewiczlll99alRoveilll977|) . Extend- 
ing this observation from two to an arbitrary number of 
N modes, one obtains 

W(a) = (^j (ft(a))=0) n(a), (148) 

where a = x + ?p = (ai, ajy) and n(a) is the 

quantum expectation value of the operator 

N N 

ft(a) = ® fti(ai) =(g)A(a ! )(-lf*A t (« 1 ) ■ (149) 

i=l i=l 

The operator Di(cti) is the displacement operator of 
Eq. 165( 1 acting on mode i. Thus, 11(a) is a product 
of displaced parity operators corresponding to the mea- 
surement of an even (parity +1) or an odd (parity — 1) 
number of photons in mode i. Each mode is then char- 
acterized by a dichotomic variable similar to the spin 
of a spin- 1/2 particle or the single-photon polarization. 
Different spin or polarizer orientations from the original 
qubit-based Bell inequality are replaced by different dis- 
placements in phase space. The nonlocality test then 
simply relies on this set of two-valued measurements for 
each different setting. 

In order to expose the nonlocal two-party correlations 
of the two-mode squeezed state, one may then consider 



the combination (jBanaszek and Wodkiewiczl Il998|) 

B 2 = n(0, 0) + 11(0, (3) + IL(a, 0) - 1%, /3) , (150) 

which satisfies \B 2 \ < 2 for lo cal realistic theories accord- 
ing to the CHSH inequality l|Clauser et all Il969j) 

\C(a u a 2 ) + C( ai ,a' 2 ) + C(a[, a 2 ) - C(a[, a' 2 )\ < 2. 

(151) 

Here, C(<ii, a 2 ) are the correlation functions of measure- 
ments on particle 1 and 2 for two possible measurement 
settings (denoted by a, and a\ for each particle i) . 

By writing the two-mode squeezed state according 
to Eq. I|148(l for N — 2 as n( a 1,0:2) and inserting 
it into Eq. I|15U|) with, for example, a = (3 = i\fj 
(where J > is a real displacement parameter), one 
obtains B 2 = 1 + 2cxp(-2J r cosh2r) - exp(-4Je +2r ). 
In the limit of large r (so cosh2r « e +2r /2) and 
small J , B 2 is maxi mized for Je +2r = (ln2)/3 , yield - 
ing Bf ax w 2.19 l|Banaszek and Wodkiewicl Il998|) . 
which is a clear violation of the inequality \B 2 \ < 2. 
A similar analysis, using Eq. (|148fl . reveals the non- 
local ./V-party correlations of the multipartite entan- 
gled Gauss ian iV-mode state with correlation matrix in 
Eq. I|138fl l|van Loock and Braunsteinl |2001a). In this 
case, the nonlocality test is possible using iV-particle 
gene ralizations of the two-particle Be ll -CHSH inequal- 
ity Gisin and Bechmann-Pasauinuccil [l998; Klvshko, 
1993). For growing number of parties and modes of 
the TV-mode state in Eq. (|138|l . its nonlocality repre- 
sented by the maximum violation of the corresponding 
Mcrmin-Klysh ko-type inequality seems to increa se non- 
exponentiallv ijvan Loock and Braunsteinl l2001a|) . This 
is different from the qubit GHZ states which show an 
exponential inc rease of the violations as the number of 
parties grows jGisin and Bechmann-Pasauinuccil Il998t 
iKlvshkol 11993 iMerminl Il990|) . Correspondingly, an ex- 
ponential increase can be also obtained by considering 
the maximally entangled iV-party states defined via the 
two-dimensional parity-spin ( "pseudospin" ) subspace of 
the infinite-dim ensional Hilbert space for each electro- 
magnetic mode (IChen and Zhand. I2002D . 

3. Pseudospin approach 

Alte rnatively, different from the p hase-space approach 
of lBanaszek and Wodkiewiczl ((19 981 , one can also reveal 
the nonlocality of the cv states by in troducing a "pseu- 
dospin operator" ((Chen et all 12002) . s — (s x ,s y ,s z ) T , 
in analogy to the spin operator of spin- -j systems, a = 
{o\ 1 a 2 ,az) T with the Pauli matrices Oi ijPreskilll Fl998). 
The components of the pseudospin op erator are then de- 
fined in the pho ton number basis as l|Chen et all 120021 
lHalvorsonlf2000() 

OO 

s z = (-lf, S+ = sL = X>n><2n+l|, (152) 

71=0 
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where s x ± is y — 2s±. Hence s z and s± are the photon 
number parity operator and the "parity flip" operators, 
respectively. They obey the commutation relations 



[s z ,s±J 



±2s H 



[s+,S-\ 



(153) 



equivalent to those of spin-i systems which satisfy the 
Pauli matrix algebra, [sj,Sj] = 2ieijk§k and sf = 1, with 
(i,j,k) < — > (x,y,z). The two- valued measurements for 
the nonlocality test are now represented by the Hermi- 
tian operator a ■ s with eigenvalues ±1. The unit vector 
a describes the direction along which the parity spin s is 
measured. Like in the well-known qubit context, differ- 
ent measurement settings correspond to different (parity) 
spin orientations. In the CHSH inequality Eq. 1151|) . for 
instance, substituting the setting parameters aj., a^, a[, 
and a' 2 by the vectors a\ , a.2, a[ , and a! 2 , respectively, the 
correlatio n functions now be come ((ai ■ s\) ® (02 • S2)) = 
C{a\,a,2) l)Chen et all . 12002). By parametrizing the unit 
vectors in terms of spherical coordi nates and choosing 
the right angles, it can be shown (Ch en et all . 2002) 
that the two-mode squeezed vacuum state of Eq. (|%5*|) 
maximally violates the CHSH inequality in the limit 
of infinite squeezing. For this maximum violation, the 
l.h.s. of Eq. (|151|l with correlation functions C{a\,a,2) 
takes on a value of 2v2~, the upper (Cirel'son) bound 
for a ny cv quantum state l)Chen et al 1. 12002t ICirel" son, 
Il980|) . Recently, a comparison was made between the 
different fo rmalisms for reveal ing the nonlocality of the 
cv 



generalized version 


IWilson et all. 


2002) of the phase- 


space formalism of 


Banaszck and Wodkiewicz 


(1998). 



It turns out that after ge neralizing the formalism of 
Banaszek and Wodkiewic z (|Banaszek and W6dkiewic3. 
119981 IWilson et all |2002), the two-mode squeezed vac- 
uum state even in the limit of infinite squeezing, though 
yielding larger violations than before the generaliza- 
tion, cannot maximally violate the Bell-CHSH inequal- 
ity. Thus, in order to reveal the maximum violation of 
the original EPR state as the limiting case of the two- 
m ode squeezed vacuu m state, the parity spin formalism 
of lChen et al\ l|2002l) must be employed. Similarly, the 



nonlocality of a two-mode squeezed state is more robust 
against a dissipative environment such as an absorbing 
optic al fiber when it is bas ed on the parity spin formal- 
ism (iFilip an d Mista l 120021) r ather than the phase-space 
formalism (jjeong et a^J . l2000|) . 

As for an experimental implementation of these non- 
locality tests, both the measurement of the photon num- 
ber parity alone and that of the entire parity spin op- 
erator are difficult. Already the former requires detec- 
tors capable of resolving large photon numbers. How- 
ever, there are reports on an experimental nonlocality 
test of the optical EPR state (made via a nonlinear 
%( 2 ) interaction with ultrashort pump pulses) utilizing 
homodyne-type measu r ement s with weak local oscillators 
ijKuzmich et M 120001 120011) . Since the measured ob- 
servables in this experiment are not r educible to the field 
quadratures [like in the experiment of lOu et~al\ ()l992alb|) 



where a strong local oscillator was used], a local hidden- 
variable model for the measurements cannot be simply 
constructed from the Wigner function of the state. Hence 
Bell-type violations of local realism are dete cted, similar 
to those proposed by Grangier et al\ ll 19881). The non- 
locality of the kind of 



Banasze k and Wodkiewicz! ()199 



becomes manifest in this experiment too. 

The advantage of the nonlocality tests in the "cv do- 
main" is that the entangled Gaussian states are easy to 
build from squeezed light, though the required measure- 
ments are difficult to perform (as they are not truly cv, 
but rather of discretized dichotomic form). Conversely, 
other "cv approaches" to quantum nonlocality are based 
on feasible measurements of states for which no genera- 
tion scheme is yet known . An example for this is the 
Hardy-type l)Hardvl Il992j) nonlocality proof in the cv 
domain involving simple p osition and momen tum, i.e., 
quadrature measurements (jYurke et oD,E 999). Yet an- 
other approach is the proposal of iRalph et all (|2000j) 
which relies on states built from optical parametric am- 
plification in the low-squeezing (polarization-based dv) 
limit and utilizes efficient homodyne detections. Fur- 
ther theoretical work on quantum nonlocality tests using 
ho modyne-type cv measu reme nts were published rec ently 
bv lBanaszek et all l)2002|) and lWenger et all ()2003|) . 

As for proposals for revealing the nonlocality of 
multi-party entangled cv states, there is a similar 
trade-off between the feasibility of the state genera- 
tion and that of the measurements. For instance, 
as discuss ed previously, applying th e phas e-space ap- 
proach of Ba naszek and Wodkiewicz! (|1998l) to the A- 
party Mermin-Klyshko inequalities using the Gaussian 
TV-mode state with correl a tion m atrix in Eq. 1|138|) 
l|van Loock and BraunsteinL l2001a() requires measure- 
ments of the photon number parity. In contrast, more 
feasible position and momentum m easurements can be 
used to cons truct a GHZ paradox llGreenberger et~aH. 
Il990|) for cv l|Massar and Pironid l200lj) . but the states 
involved in this scheme are not simply producible from 
squeezers and beam splitters. Similarly, one may con- 
sider the A-party A-mode eigenstates of the parity spin 
operator for different orientations a ■ s. These states 
take on a form identical to that in Eq. I|121fl . now 
for each mode defined in the two-dimensional parity- 
spin subspace of the infinite-d imensional Hilber t spac e 
of the electromagnetic mode llChen and Zhand. [2002). 
They are, being completely analogous to the qubit GHZ 
states, maximally entangled A-party states, thus lead- 
ing to an exponential increase of violations of the N- 
party Mermin- Klyshko inequalit i es as the number of 
parties grows (Ch en and Zhand. I2002D . Hence, the 
nonexponential increase of violations for the Gaussian 
A-mode states with correlation matrix in Eq. I|138|) 
may be due to the "limited" ph ase-space formalism of 
iBanaszek and W6dkiewic3 lll998|) rather than the non- 
maximum W-type entanglement of these states for fi- 
nite squeezing. However, it has not been shown yet 
whether the maximally entangled parity-spin GHZ states 
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of Ch en and Zhand §002) are obtainable as the infinite- 
squeezing limit of the Gaussian TV-mode states with cor- 
relation matrix in Eq. Ijl38(l . Only in the two-party case, 
it is known that the state whi ch maximally viola tes the 
parity-spin CHSH inequality ijChen et all l2002|) is the 
infinite-squeezing limit of the two-mode squeezed vacuum 
state. 



E. Verifying entanglement experimentally 

So far, we have discussed the notion of entanglement 
primarily from a theoretical point of view. How may one 
verify the presence of entanglement experimentally? In 
general, theoretical tests might be as well applicable to 
the experimental verification. For instance, measuring a 
violation of inequalities imposed by local realism confirms 
the presence of entanglement. In general, any theoretical 
test is applicable when the experimentalist has full in- 
formation about the quantum state after measurements 
on an ensemble of ide ntically prepared states [e.g. by 
quantum tomography ijLeonhardtl 11997)] . In the cv set- 
ting, for the special case of Gaussian states, the presence 
of (even genuine multipartite) entanglement can be con- 
firmed, once the complete correlation matrix is given. In 
this case one can apply, for instance, the npt criterion, 
as discussed in Sec. MI. A. 21 and Sec. IIII.B.3I 

The complete measurement of an A^-mode Gaussian 
state is accomplished by determining the 2A~ x 2A~ 
second-moment correlation matrix. This corresponds to 
N(l + 2N) independent entries takin g into account the 
symmetry of the correlation matrix. iKim et~al\ i|2002|) 
recently demonstrated how to determine all these en- 
tries in the two-party two-mode case using beam split- 
ters and homodyne detectors. Joint homodyne detec- 
tions of the two modes yield the intermode correla- 
tions such as (xii 2 ) — (xi)(x 2 ), {xip 2 ) — (xi)(p 2 ), etc. 
Determining the local intramode correlations such as 
(xipi +piXi)/2 — (xi)(p\) is more subtle and requires 
additional beam splitters and homodyne detections (or, 
alternatively, heterodyne detections). Once the 4x4 
two-mode correlation matrix is known, the npt crite- 
rion can be applied as a necessary and sufficient condi- 
tion for bipartite Gaussian two-mode inseparability (see 
Sec. lIII.A.2L In fact, the entanglement can al so be quan- 
tified then for a given correla tion matrix (|Kim et all . 
l2002t IVidal and Wernerl l2002|) . For three-party three- 
mode Gaussian states, one may pursue a similar strategy. 
After measuring the 21 independent entries of the cor- 
relation matrix [for exam ple, by extending Kim et al. 's 
scheme ijKim et all 120021) to the three- mode case], the 
necessary and sufficient criteria bv lGiedke etal\ (l2001cJl 
can be applied (see Sec. IIII.B.3|) . 

However, even for Gaussian states, such a verifica- 
tion of entanglement via a complete state determina- 
tion is very demanding to the experimentalist, in par- 
ticular, when the state to be determined is a potentially 
multi-party entangled multi-mode state. Alternatively, 



rather than detecting all the entries of the correlation 
matrix, one may measure only the variances of appropri- 
ate linear combinations of the quadratures of all modes 
involved. This may still be sufficient to unambiguously 
verify the presence of (genuine multipartite) entangle- 
ment. For example, the sufficient inseparability criteria 
from Sec. IIII.A.2I expressed by violations of Eq. (|112|) or 
Eq. (|114fl , can be used for witnessing entanglement exper- 
imentally. The indirect experimental confirmation of the 
presence of entanglement then relies, for example, on the 
detection of the quadrature variances ([A(ii-i 2 )] 2 ) and 
([A(pi +p 2 )} 2 ) after c ombining the two relevant modes at 
a beam splitter llTanlll999l) . As for a more direct verifica- 
tion, the measured quadratures o f the relevant state can 
also be combined electronically l|Furusawa and Kimblet 
120031) . 

Similarly, for three parties and modes, one may at- 
tempt to detect violations of i nequalities of the form 
l|van Loock and Furusawal [2003) 

((Au) 2 ) p + ((Av) 2 ) p > f(hx, h 2 , h 3 , 91, g 2 , 93) , (154) 

where 

u = hixi + h 2 x 2 + h 3 x 3 , v = gipx + g 2 p 2 + g 3 p 3 . 

(155) 

The hi and gi are again arbitrary real parameters. For (at 
least partially) separable states, the fo llowing statements 
hold ()van Loock and Furusawal l2003|) . 

P = *^2vi Pi,km ® Pi,n 
i 

=> f(hi,h 2 ,h 3 ,g 1 ,g 2 ,g 3 ) = 

{\h n gn\ + \hkgk + h m gm,\)/2. (156) 

Here, pi t km ® Pi.n indicates that the three-party density 
operator is a mixture of states i where parties (modes) 
k and m may be entangled or not, but party n is not 
entangled with the rest, and where (k,m,n) is any triple 
of (1, 2, 3). Hence also the fully separable state is included 
in the above st atements. In fact, for the fully separable 
state, we have l)van Loock and Furusawal l2003|) 

P = Pi,i ® Pi, 2 <8> Pi,3 

i 

f(h%, h 2 , h 3 ,g 1 ,g 2 ,g 3 ) = 
(\h igi \ + \h 2 g 2 \ + \h 3 g 3 \)/2, (157) 

which is always greater or equal than any of the bound- 
aries in Eq. (|156|l . By detecting violations of the con- 
ditions in Eq. (|154|) with Eq. (|156|l . one can rule out 
any partially separable (biseparable) form of the state 
in question and hence verify genuine tripartite entan- 
glement. An experiment in which this verification was 
achieved will be briefly described in Sec. IVIII 

The advantage of all these cv inseparability criteria is 
that, though still relying upon the rigorous definition of 
entanglement in terms of states as given in Sec. lIII.Al and 
Sec. IIII. 51 they can be easily checked via efficient homo- 
dyne detections of the quadrature operator statistics. 
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IV. QUANTUM COMMUNICATION WITH 
CONTINUOUS VARIABLES 

When using the term quantum communication, we re- 
fer to any protocol in which the participants' capabili- 
ties to communicate are enhanced due to the exploitation 
of quantum features such as nonorthogonality or entan- 
glement. Such an enhancement includes, for instance, 
the secure transmission of classical information from a 
sender ( "Alice" ) to a receiver ( "Bob" ) based on the trans- 
fer of nonorthog onal quantum states. This quantum 
key distribution llBennettl . Il992t iBennett and Brassardl 
Il984t lEkerti Il99ll is the prime example of a full quan- 
tum solution to an otherwise unsolvable classical prob- 
lem, namely that of unconditionally secure communica- 
tion. The, in principle, unconditional security of quan- 
tum cryptography is provided by the fact that an eaves- 
dropper is revealed when she ( "Eve" ) is trying to extract 
the classical information from the quantum system be- 
ing transmitted. She would have to perform measure- 
ments, and thereby (at least for some measurements) 
inevitably disturb and alter the quantum system. In 
general, a solution to a classical communication prob- 
lem provide d by a quantum-b ased protocol should be 
"complete" l)Lutkenhausl l2002|) . connecting the classical 
world of Alice with that of Bob. For example, a secure 
quantum cryptographic communication scheme also re- 
lies on the classical one- time pad. By contr ast, there are 
"quantum subroutines" ijLutkenhausl 12002^1 that run en- 
tirely on the quantum level. A prime example for this 
is quantum teleportation, whereby the quantum infor- 
mation encoded in nonorthogonal ("arbitrary" or "un- 
known" ) quantum states is reliably transferred from Alice 
to Bob using shared entanglement and classical commu- 
nication. In order to teleport a qubit, two bits of classical 
information must be sent. As an application of quantum 
teleportation, one may imagine the reliable connection of 
the nodes in a network of quantum computers. 

Nonorthogonal quantum states when sent directly 
through a quantum communication channel are in any re- 
alistic situation subject to environmental-induced noise, 
i.e., the quantum channel is noisy. The coherent superpo- 
sition of the signal then turns into an incoherent mixture, 
a process called decoherence. There are various meth- 
ods to circumvent the effect of decoherence, all of which 
were originally proposed for dv systems. These methods 
are quantum teleportation, comb ined with a purificatio n 
of the distributed entanglement l)Bennett et flD. ll996bh . 
or quantum error correction [originally pro posed for re- 
ducing decoherence in a quantum computer (jShorl Il995f) 
rather than in a quantum communication channel] . They 
enable, in principle, completely reliable transmission of 
quantum information. 

Apart from the above-mentioned quantum communi- 
cation scenarios in which Alice and Bob benefit from us- 
ing quantum resources, there are also fundamental re- 
sults of "quantum communication" on the restrictions 
imposed by quantum theory on classical communication 



via quantum stat es. A very fam ous result in this con- 
text is that from IHolevol (1998), sometimes referred to 
as the "fundamental law of quantum communication" 
ijCaves and Drummondlll994j) . It places an upper bound 
( "Holevo bound" ) on the mutual information of Alice and 
Bob, 

I(A : B) < S(p) - PaS(p a ) < S( P ) , (158) 

a 

where S(p) is the von Neumann entropy, p is the mean 
channel state, and p a are the signal states with a priori 
probabilities p a . In this relation, equality is achievable if 
Alice sends pure orthogonal signal states. 

Even assuming an ideal (noiseless) channel, any at- 
tempt by Bob to retrieve the classical information sent 
from Alice introduces "noise" when the signal states are 
nonorthogonal. In fact, there is an optimum of "accessi- 
ble information" , depending on the measurement strat- 
egy that Bob employs. The most general measurement 
strategy is described by so-called generalized measure- 
ments or positive operator- valued measures (POVM's). 
Such POVM's Ef, are generalizations of projection oper- 
ators and satisfy 

E b = E\ > , ^E h = l. (159) 

b 

When Bob is presented with a state p a representing letter 
a from Alice's alphabet, he will find instead letter b from 
his own alphabet with a conditional probability given by 

Pb\a = Tr^ &/ 5 a . (160) 

From this, one may compute the mutual information 
I (A : B), as we will show in Sec. IIV.BI in the con- 
text of dense coding. In this protocol, the roles of the 
classical and quantum channels arc interchanged rela- 
tive to those in quantum teleportation. Instead of re- 
liably transferring quantum information through a clas- 
sical channel using entanglement as in teleportation, in 
a dense coding scheme, the amount of classical informa- 
tion transmitted from Alice to Bob is increased when Al- 
ice sends quantum information (her half of an entangled 
state shared with Bob) through a quantum channel to 
Bob. For instance, two bits of classical information can 
be conveyed by sending just one qubit. Like quantum 
teleportation, dense coding also relies on preshared en- 
tanglement. Thus, dense coding is still in agreement with 
Holevo's rule that at most one classical bit can be trans- 
mitted by sending one qubit, because, taking into account 
Bob's half of the entangled state transmitted to him prior 
to the actual communication ("off-peak"), in total two 
qubits must be sent to Bob. This entanglement-based 
dense coding is sometimes referred to as superdense cod- 
ing, as opposed to the d ense coding o r "qua ntum coding" 
schemes introduced bv ISchumacherl l)l995l) . The latter 
enable Alice and Bob to approach the Holevo bound even 
for nonorthogonal or mixed signal states via appropriate 
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encoding of the classical information into these states. 
These issues of quantum coding, including the results of 
Holevo, may be considered as an extension of Shannon's 
classical information t heory (ap plied to communication) 
to the quantum realm IjPresk ill. 1998). A brief introduc- 
tion to the mathemati cal description of classical infor- 
mation a la Shannon JSh annori 1 1948(1 will be given in 
Sec. UvTH 

The following review of quantum communication 
protocols with cv mainly contains entanglement-based 
schemes. From the preceding sections, we know that 
in the cv domain, not only the generation of cv en- 
tanglement, but also its manipulation via (local) mea- 
surements and unitary operations turns out to be very 
easy. For instance, distinguishing exactly between maxi- 
mally entangled states through a suitable measurement, 
as needed for quantum teleportation, is not possible 
with photonic qubit Bell states using only linear op tics 
( Liitkcnh aus et al l ll999HVaidman and Yoramlll999|) . In 
contrast, such a "complete Bell detection" for cv only 
requires a beam splitter and homodyne detections. Sim- 
ilarly, unitary transformations such as phase-space dis- 
placements can be easily performed for the continuous 
quadrature amplitudes using feed- forward techniques. 
Homodyne-based Bell detection and feed-forward are the 
main tools both in cv quantum teleportation and cv dense 
coding. 

The cv quantum communication schemes presented be- 
low include the entanglement-based protocols for quan- 
tum teleportation (Sec. IIV.A|) and (super)dense coding 
(Sec. HV.'B|) . A potentially important application of quan- 
tum teleportation, the teleportation of one half of an 
entangled state (entanglement swapping), will be also 
discussed in the cv setting. Entanglement swapping is 
an essential ingredient of potential long-distance imple- 
mentations of quantum communication: the two remote 
ends of a noisy quantum channel are then provided with 
good entanglement after purifying the noisy entangle- 
ment in different segments of the channel and combin- 
ing the segments via entanglement swapping. Several 
"cv approaches" to entanglement distillation (including 
the purification of mixed entangled states and the con- 
centration of pure nonmaximally entangled states) will 
be discussed in Sec. I1V.FI Apart from quantum telepor- 
tation combined with entanglement purification, alterna- 
tively, quantum error correction codes can be used to pro- 
tect quantum information from decoherence when being 
sent through a noisy quantum communication channel. A 
possible cv implementation of quantum error correction 
for communication based on linear optics and squeezed 
light will be presented in Sec. lIV.Cl As for quantum com- 
munication schemes not necessarily based on entangle- 
ment, we will discuss some cv approaches to secure com- 
munication (cv quantum key distribution) in Sec. IIV.DI 
In Sec. IIV.FI we will also briefly mention the proposals 
for potential atom-light interfaces for the storage of cv 
quantum information (quantum memory) in a quantum 
repeater. 



A. Quantum teleportation 

Quantum teleportation, in general, is the reliable 
transfer of quantum information through a classical com- 
munication channel using shared entanglement. The tele- 
portation of continuous quantum variables such as po- 
siti on and moment um of a particle, as first proposed 
bv IVaidmarJ l|l994l) . relies on the entanglement of the 
states in the o riginal Einstein, Pod olsky, and Rosen 
(EPR) paradox ((Einstein et all\193^ . In quantum op- 
tical terms, the observables analogous to the two conju- 
gate variables position and momentum of a particle arc 
the quadratures of a single mode of the electromagnetic 
field, as we have discussed in Sec. E] By considering the 
finite quantum correlations between these quadratures 
in a two-mode squeezed state, a realistic implementa- 
tion for the teleportat ion of continuous quantum vari - 
ables was proposed bv iBraunstein and Kimble! l(l998a(l . 
Based on this proposal, in fact, quantum teleportation of 
arbitrary coheren t states has been achiev ed with a fidelity 
F = 0.58 ± 0.02 l|Furusawa et aZJ . 11998^1 . Without using 
entanglement, by purely classical communication, an av- 
erage fidelity of 0.5 is the best that can be achieved if the 
alphabet of input states i ncludes potentially all coh erent 
states with even weight l)Braunstein et afl . l20 00b). We 
will discuss the issue of delineating a boundary between 
classical and quantum domains for teleportation in more 
detail later. The scheme based on the continuous quadra- 
ture amplitudes enables the realization of quantum tele- 
portati on in an "unconditional" fashio n with high effi- 
ciency jBraunsteh^nd^jn^ in 
Refs. l|Braunstein et a/.Ul998tlFurusawa et adil998[) . In 
this experiment, the following three criteria necessary for 
quantum teleportation were achieved: 

1. ) An "unknown" quantum state enters the sending 
station for teleportation. 

2. ) A teleported state emerges from the receiving station 
for subsequent evaluation or exploitation. 

3. ) The degree of overlap between the input and the tele- 
ported states is higher than that which could be achieved 
if the sending and the receiving stations were linked only 
by a classical channel. 

There are several aspects of quantum teleportation 
that are worth pointing out: 

1. ) The arbitrary input state can even be unknown to 
both Alice and Bob. If Alice knew the state she could 
send her knowledge classically to Bob and Bob could pre- 
pare the state. Hence, in quantum teleportation, the 
state remains completely unknown to both Alice and Bob 
throughout the entire teleportation process. 

2. ) The input system does not remain in its initial state 
because of the Bell measurement. This fact ensures that 
no-cloning is not violated. 

3. ) A contradiction to special relativity is avoided, be- 
cause the classical communication required between Alice 
and Bob is restricted by the speed of light. 

Let us now describe the teleportation of continu- 
ous quantum variables in the simplest way, consider- 
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ing just (discrete) single modes of the electromagnetic 
field. The generalization to a realistic broadband de- 
scription, in particular, with respect to the mentioned 
teleportation experiment, is straightforward and will 
be briefly discussed in Sec. IVffl In the teleporta- 
tion scheme of a single mode of the electromagnetic 
field, the shared entanglement resource is a two-mode 
squeez ed state [e.g. as in E q. 1891 1: in the original pro- 
posal l)Braunstein and Kimblel Il998a|) , equivalently, the 
Wigner function of the finitely squeezed EPR state of 
Eq. (|82|l was used]. The entangled state is sent in two 
halves: one to "Alice" (the teleporter or sender) and 
the other one to "Bob" (the receiver), as illustrated in 
Fig. [3 In order to perform the teleportation, Alice has 
to couple the input mode she wants to teleport with her 
"EPR mode" at a beam splitter. The "Bell detection" 
of the x quadrature at one beam splitter output, and of 
the p quadrature at the other output, yields the clas- 
sical results to be sent to Bob via a classical commu- 
nication channel. In the limit of an infinitely squeezed 
EPR source, these classical results contain no informa- 
tion about the mode to be teleported. This is analo- 
gous to the Bell measurement of the spin-i-particle pair 
by Alice for the teleportation of a spin-i-particle state. 
The measured Bell state of the spin-i-particle pair de- 
termines, for instance, whether the particles have equal 
or different spin projections. The spin projection of the 
individual particles, i.e., Alice's "EPR particle" and her 
unknown input particle, remains completely unknown. 
According to this analogy, we call Alice's quadrature 
measurements for the teleportation of the state of a sin- 
gle mode "Bell detection" . It corresponds to the projec- 
tion onto the maximally entangled cv basis of two modes. 
Due to the Bell detection and the entanglement between 
Alice's "EPR mode" and Bob's "EPR mode", suitable 
phase-space displacements of Bob's mode convert it into 
a replica of Alice's unknown input mode (a perfect replica 
for infinite squeezing). In order to perform the right dis- 
placements, Bob needs the classical results of Alice's Bell 
measurement. 

Quantum teleportation is a conceptually remarkable 
phenomenon. However, as a potential application, it be- 
comes only significant when combined with entanglement 
purification protocols fSec. IIV.'E|) . In this case, instead 
of sending quantum information directly through a noisy 
channel, a more reliable transfer can be achieved by first 
distributing entanglement through the same channel, pu- 
rifying it, and eventually exploiting it in a quantum tele- 
portation protocol. We will now turn to the cv protocol 
for quantum teleportation in more detail. 



1. Teleportation protocol 

The simplest formalism to describe cv quantum tele- 
portation is based on the Heisenberg representation. In 
Eq. (|89|) . modes 1 and 2 are entangled to a finite de- 
gree, corresponding to a (pure) nonmaximally entangled 




FIG. 2 Teleportation of a single mode of the electromagnetic 
field. Alice and Bob share the entangled state of modes 1 
and 2. Alice combines the mode "in" to be teleported with 
her half of the EPR state at a beam splitter. The homo- 
dyne detectors D x and D p yield classical photocurrents for 
the quadratures x u and p v , respectively. Bob performs phase- 
space displacements of his half of the EPR state depending on 
Alice's classical results. The entangled state "EPR", eventu- 
ally shared by Alice and Bob, may be produced by combining 
two single-mode squeezed states at a beam splitter or directly 
via a nonlinear two-mode squeezing interaction. 



state. In the limit of infinite squeezing, r — > oo, the indi- 
vidual modes become infinitely noisy, but also the EPR 
correlations between them become ideal: (xi — X2) — > 0, 
(pi + P2) — ► 0. Now mode 1 is sent to Alice and mode 2 
is sent to Bob (Fig.0). Alice's mode is then combined at 
a (phase-free) 50:50 beam splitter with the input mode 
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X v = —7=X in H j=X\, p v = —7=Pin + —y=Pi- 



(161) 



Using Eqs. (|161|) and (|89|l . we may write Bob's mode 2 
as 



X 2 



P2 



= x in — (xi — x 2 ) — V2x u 

= Pin + (Pi +P2) ~ V2p v 

= p in + V2e- r ^ 0) - V2p v 



(162) 



Alice's Bell detection yields certain classical values x u 
and p v for x u and p v . The quantum variables x u and 
p v become classically determined, random variables x u 
and pv Now, due to the entanglement, Bob's mode 2 
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collapses into states that for r — > oo differ from Alice's 
input state only in (random) classical phase-space dis- 
placements. After receiving Alice's classical results x u 
and p v , Bob displaces his mode, 
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Xtel 
■Pte\ 
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P2 



- gV2x u , 
gV2p v , 



(163) 



thus accomplishing the teleportation. The parameter g 
describes a gain for the transformation from classical pho- 
tocurrent to complex field amplitude. For g = 1, Bob's 
displacements eliminate x u and p v in Eq. (|162[1 . The 
teleported mode then becomes 
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For an arbitrary gain g, we obtain 

_ ? 9- 1 +ta(0) 9 + 1 -r-(0) 

Xtel — fj^in /— C Xi p= e 
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ft- = gfa + i^e»fl> + i±±e-*$>. (165) 

Note that these equations do not take into account Bell 
detector inefficiencies. 

Consider the case 5 = 1. For infinite squeezing r — > 00, 
Eqs. (|164f> describe perfect teleportation of the quantum 
state of the input mode. On the other hand, for the 
classical case of r = 0, i.e., no squeezing and hence no 
entanglement, each of the teleported quadratures has two 
additional units of vacuum noise compared to the orig- 
inal input quadratures. These two units are so-called 
quantum duties or "quduties" which have to be paid 
when crossin g the border between quantum and classi- 
cal domains IIBraunstein and Kimblel Il998a|) . The two 
quduties represent the minimal tariff for every "c lassical 
teleportation" scheme ijBraunstein et ail l200 0bh One 
quduty, the unit of vacuum noise due to Alice's detection, 
arises from her attempt to "simultaneously measure" 
the two conjugate v ariables x-,„ and p\-n in an Arthurs- 
Kelly measurement ((Arthurs and KelTvl Il965|) . This is 
the standard quantum limit for the detection of both 
quadratures when attempting to gain as much informa- 
tion as possible about the quantum state. The standard 
quantum limit yields a product of the measurement ac- 
curacies which is twice as large as the Heisenberg min- 
imum uncertainty product. This product of the mea- 
surement accuracies contains the intrinsic quantum limit, 
the Heisenberg uncertainty of the mode to be detected, 
plus an additional unit of vacuum noise due to the detec- 
tion. In other words, when measuring the input Wigner 
function the resulting distribution is the Wigner func- 
tion convoluted with one unit of vacuum, i.e., the Q 
function [see Eqs. (|33|) and (G2}]. The second quduty 
arises when Bob uses the information of Alice's detec- 
tion to generate the sta t e at am plitude V2x u + i-</2p v 
l|Braunstein and Kimblel Il998a) . It can be interpreted 



as the standard quantum limit imposed on state broad- 
casting. 

The original proposal for the quantum teleportation 
of continuous variables with a finite degree of entan- 
glement based on two-mode squeezed states used the 
Wigner representation a nd its convolution formalism 
l|Braunstein and Kimblel Il998a|) . With the EPR-state 
Wigner function from Eq. JS^J, W(£) = W / epr(«i, a 2 ), 
the whole system after combining mode "in" [which is 
in an unknown arbitrary quantum state described by 
Wi n (a;i n ,pi n )] with mode 1 at a phase-free 50:50 beam 
splitter (having the two outgoing modes a u = x u + ip u 
and a v — x v +ip v ) can be written, according to the trans- 
formation rules for Wigner functions under linear optics, 
as 



W(a u ,a v ,a 2 ) = / dx in dp in W in (xi n ,pi n ) 
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Alice's Bell detection on the maximally entangled basis, 
i.e., homodyne detections of x u = (x- m — Xi)/v2 and 
Pv = (Pin +Pi)/v2) is described via integration over x v 
and p u : 



J dx v dp u W(a u ,a v ,a 2 ) = J dx dpW in (x,p) 
x - \/2x u + i(V2p v - p),a 2 



xW-epr 



(167) 



Bob's displacements are now incorporated by the sub- 
stitution a 2 — x' 2 — \f2xu + i(p 2 — s/2p v ) in Wepr in 
Eq. (|167|) . Finally, integration over x u and p v yields 
the teleported ensemble state (for an ensemble of input 
states), 



W tei {a' 2 ) 
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The teleported state is a convolution of the in- 
put state with the complex Gaussian G a {a) = 
[1/(7717)] exp(— |a| 2 /cr) with the complex variance a = 
e~ 2r . This convolution adds the excess noise variance 
e~ 2r /2 to each quadrature of the input state. 

As for a description of cv quantum teleportation in 
the Schrodinq er representation, there are several works. 
In Ref. ( Mil burn and Braunsteirl |l999), two different 
teleportation protocols were considered, referring to 
two different kinds of Bell measurements made by Al- 
ice. Depending on this choice, measuring either rel- 
ative position and total momentum or photon-number 
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difference and phase sum, the entire protocol, includ- 
ing the two-mode squeezed vacuum resource, is writ- 
ten in the position or in the Fock basis, respectively 
ijMilburn and Braunsteinl ^999). The protocol based 
on number-difference and pha se-sum measurements was 
later modified a n d extended b y lClausen et all l|2000l) and 
ICochrane etaR (l200fj 12002ft . The extended cv qu an- 
tum teleportation protocol of IQpatrnv et all l)2000j) is 
based on quadrature Bell measurements and leads to an 
enhancement of the teleportation fidelity (see the next 
section) via subtraction of single photons. This pro- 
tocol is also formulated in t he Schrodinger representa- 
tion. Using the approach of IQpatrnv et al\ l)2000|) . i.e., 
making conditional measurements on tw o-mode squeezed 
state s, it is demonstrated in Ref. ((Cochrane et all 
2002) that the teleportation fidelity can be improved 
in both the quadrature-measurement based and the 
number-difference and phase-sum measurement based 
scheme. In particular, for quantifying the performance 
of cv quantum teleportation of dv (non-Gaussian) states 
such as Fock states, the tra nsfer-operator formalis m in 
the Schrodinger picture by iHofmann et all 1)20001 ) and 
llde et all l)200lj) is very useful. In this formalism, the 
first step is writing the "cv Bell states" in the Fock basis, 
Lol n )l n )' where D((3) is the displace- 
ment operator and (3 = u + iv is the measurement result. 
After projecting Alice's input state |</>); n and her half of 
the two-mode squeezed vacuum state in Eq. onto 
this Bell basis and reversing the measured displacement 
in Bob's half, \<t>) is transferre d to Bob's location in the 
form of l|Hofmann et all |2000|) 

|0tei(/?)> = f(0)\d>) , (169) 
with the transfer operator 

f(/3) = D(p)V(\)D(-/3) , (170) 
and the "distortion operator" 
h _ \ 00 

^( A ) = V^^ A " /2|n>(n| - (m) 

n— 

Here, the telcported state |0 te i(/3)) is unnormalized and 
(</>tei(/3)|</>tei(/3)) is the probability for obtaining result 
[3. The imperfection of the entanglement resource is 
expressed by the distortion operator, where the fac- 
tors Vl ^ A A"/ 2 are the Schmidt coefficients of the 
finitely squeezed, only nonmaximally entangled two- 
mode squeezed vacuum state in Eq. (|85f) . Note that for 
infinite squeezing, A — ► 1, the distortion operator, and 
hence the transfer operator too, becomes proportional to 
the identity operator. The teleported state |^>tei(/3)} cor- 
responds to a single shot (a single teleportation event). 
Thus, the teleported ensemble state, averaged over all 
measurement results for an ensemble of input states be- 
comes 



corresponding to Wtci(a' 2 ) in Eq. I|168l). The distor- 
tion o perator is also used in Ref. l|Braunstein et all 
l2000al) to describe the effect of the nonmaximally en- 
tangled EPR channel. Moreover, using a universal 
form alism in the Schrodinger picture, it is shown in 
Ref. ijBraunstein et ail l2000a|) that in both dv and cv 
quantum teleportation, Bob's local unitary operation 
means twisting the shared entanglement relative to the 
entangled state measured in the Bell detection. The 
transfer-operator description of cv quantum teleporta- 
tion in Eq. (|169fl corresponds to a completely positive 
map and T((3) is just a Kraus operator l|Krausl 11983). 
This map projects the input state onto the conditional 
teleported state. Upon averaging over all results /3, the 
map becomes completely positive and trace-preserving 
(CPTP), yielding the normalized teleported state /5 to i in 
Eq. (|172fl . A position-momentum basis description of 
thi s transfer-oper a tor o r CP-map formalism was given 
bv iTakeoka et al\ l|2002D . The CP map derived in this 
paper is also more general, including mixed entangled 
states as a resource for quantum teleportation. Another 
alternative formulation of nonideal cv qua ntum telepor- 
tation was proposed by [Vukics et al. ( 2002), utilizing the 
coherent-state basis. 



2. Teleportation criteria 

The teleportation scheme with Alice and Bob is com- 
plete without any further measurement. The teleported 
state remains unknown to both Alice and Bob and need 
not be demolished in a detection by Bob as a final step. 
However, maybe Alice and Bob are cheating. Suppose 
that instead of using an EPR channel, they try to get 
away without entanglement and use only a classical chan- 
nel. In particular, for the realistic experimental situation 
with finite squeezing and inefficient detectors where per- 
fect teleportation is unattainable, how may we verify that 
successful quantum teleportation has taken place? To 
make this verification we shall introduce a third party, 
"Victor" (the verifier), who is independent of Alice and 
Bob (Fig. 0. We assume that he prepares the initial in- 
put state (drawn from a fixed set of states) and passes it 
on to Alice. After accomplishing the supposed telepor- 
tation, Bob sends the resulting teleported state back to 
Victor. Victor's knowledge about the input state and 
detection of the teleported state enable him to verify 
whether quantum teleportation has really occurred. For 
this purpose, however, Victor needs some measure that 
helps him to assess when the similarity between the tele- 
ported state and the input state exceeds a boundary that 
is only exceedable with entanglement. 

One such measure is the so-called fidelity F, for an 
arbitrary input state |</>i n ) defined by 4 l|Braunstein et all . 



Ptei= / d 2 /3|^tci(/3))(0tci(/3)| , (172) 



4 apart from the fidelity, we also used the symbol F for the mean 
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FIG. 3 Verification of quantum teieportation. The verifier 
"Victor" is independent of Alice and Bob. Victor prepares 
the input states which are known to him, but unknown to 
Alice and Bob. After a supposed quantum teieportation from 
Alice to Bob, the teleported states are given back to Victor. 
Due to his knowledge of the input states, Victor can compare 
the teleported states with the input states. 
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It equals one only if p tc i — |<fci)(<fei|- Now Alice and Bob 
know that Victor draws his states \4>i n ) from a fixed set, 
but they do not know which particular state is drawn in 
a single tri al. Therefore, an averag e fidelity should be 
considered IjBraunstein et adl2000b|) . 



F av = / P(|^in))(^in|/5tel|0in)d|</>ij 
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where P(|0i n )) is the probability of drawing a particular 
state |</>i n ), and the integral runs over the entire set of 
input states. If the set of input states contains all pos- 
sible quantum states in an infinite-dimensional Hilbert 
space (i.e., the input state is completely unknown apart 
from its infinite Hilbert-space dimension), the best av- 
erage fidelity F av achievable by Alice and Bob without 
using entanglement is zero. The corresponding best av- 
erage fidelity if the set of input states contains all pos- 
sible quantum states in a ri-dimensi onal Hilbert space 
is F av = 2/(1 + d) <|Barnuml Il998[) . Thus, one ob- 
tains F av = for d — > oo, and the qubit boundary 
F av = 2/3 for d = 2. If the input alphabet is restricted 
to coherent states of amplitude ct ln — x- m + ip ln and 



value of a collective spin. We stick with this notation in both 
cases to be consistent with the common notation in the literature. 



F = (a m |/5tei|a!i n ), on average, the fidelity achievable in 
a purely classical scheme (when averaged across the en- 
tire complex plane for arbitrary cohere nt-state inputs) is 
bounded by ijBraunstein et all l2000b|) 



F av < 



1 
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Let us apply the fidelity criterion to the single-mode 
teieportation equations Eq. (|165fl and assume an input 
alphabet containing all coherent states with equal prob- 
ability. Up to a factor x, the fidelity F = (cti n \fhei\ctin) is 
the Q function of the teleported mode evaluated for a m . 
This Q function is, in general, a bivariate Gaussian with 
mean value g(x m + «Pi n ), 
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where g is the gain and a x and a p are the variances of 
the Q function of the teleported mode for the correspond- 
ing quadratures. The Q function is a convolution of the 
Wigner function with a Gaussian of one unit of vacuum 
[Eqs. (|33|l and l|34(l ]. i.e., we have to add this unit to the 
actual variances of the teleported quadratures. Accord- 
ing to Eq. H165|l . for a coherent-state input, the variances 
of the Q function are then given by 



1 / on e 
7(l + .9 2 ) + - 
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Teleporting states with a coherent amplitude as reliably 
as possible requires unit-gain teieportation (unit gain in 
Bob's final displacements). Only in this case do the co- 
herent amplitudes of the teleported states always match 
those of the input states provided by Victor. For classical 
teieportation (r = 0) and g = 1, we obtain a x = a p = 1 
and indeed F = F av = 1/2. In order to obtain a better fi- 
delity, entanglement is needed. Then, if g = 1, we obtain 
F = -Fav > 1/2 for any r > 0. For this unit-gain teie- 
portation, we have seen that the teleported state Wtei is 
a convolution of the input W m with a complex Gaussian 
of variance e _2r [Eq. i|168[l ]. Classical teieportation with 
r = then means the teleported mode has an excess noise 
of two complex units of vacuum, 1/2 + 1/2, relative to 
the input. Any r > beats this classical scheme. Hence, 
if the input state is always recreated with the right am- 
plitude and less than two units of vacuum excess noise, 
Alice and Bob must have employed entanglement as a 
resource. 

Let us also write the fidelity in terms of the transfer 
operator of Eq. (|T7Uj) . Using Eqs. (JT721, GEH, and 

with a coherent-state input, leads to 



F= d 2 (3 |(ainin/3)|ai„)| 2 = 



1 + VA 
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Here we used D(—(3)\a) = \a — 0} and |(n|a)| 2 = 
l Q l jn\. This fidelity becomes independent of a u 



\a\ 2n e- 
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because the transfer operator of Eq. 1 170(1 corresponds 
to unit-gain teleportation. Hence, with A = tanh 2 r, we 



obtain F — F av 
g = l using Eqs 
In Sec 



= 1/(1 + e ), identical to the result for 
HE} and (|T77jl . 
III.BI wc found that one squeezed state is 
a sufficient resource for generating entanglement be- 
tween an arbitrary number of parties. In fact, applied 
to the two-party teleportation scenario, the entangle- 
ment from only one squeezed state enables quantum tele- 
portation with F av > 1/2 for an y nonzero squeezing 
ijvan Loock and BraunsteinL l2000a|L Unless Alice and 
Bob have access to additional local squeezers, 5 the max- 
imum fidelity of coherent-state teleportation achievable 
with one single-mode squeeze d state is F„„ = l/y/2 in the 
limit of infinite squeezing ijvan Loock and BraunsteinL 
l2000al) . 

Alternative criteria for quantum teleportation were 
proposed by [Rj|liihjMid_Xam fl998). Reminiscent of 
the criteria i^ollano^^n ~ 1990|) for quantum non - 
demolition (QND) measurements l|Caves et 
these are expressed in terms of two inequalities for the 
conditional variances [Eq. (|145fl ] and the so-called signal 
transfer coefficients of both conjugate quadratures. The 
boundary between classic al and quantum telepo rtation 
defined by the criteria of iRalph and Larnl l|l998f) differs 
from that in Eq. (|175fl in terms of fidelity According 
to Ralph and Lam, the best classical protocol permits 
output states completely different from the input states, 
corresponding to zero fidelity. This can be achieved, for 
instance, via an asymmetric detection scheme, where the 
lack of information in one quadrature leads, on average, 
to output states with amplitudes completely different 
from those of the input states. However, certain cor- 
relations between the input and the teleported quadra- 
tures can still attain the optimal value allowed without 
using entanglement. By contrast, the best classical pro- 
tocol in terms of fidelity always achieves output states 
pretty similar to the input states. The fidelity boundary 
in Eq. i|175l) is exceeded for any squeezing in the EPR 
chann el, whereas fulfil l ment of the teleportation crite- 
ria of Ral ph and Laml l|199ct) requires more than 3 dB 
squeezing. 



5 using additional local squeezers, Alice and Bob can transform 
the shared entangled state built from on e squeezed state into 
the "canonical" two-mode squeezed state jBo wen et all l2003at 
Ivan LoocU. 120021: Ivan Loock and Braunst^jn " l2003i) ~^Mote that 
such local squeezing operations do not change the amount of the 
entanglement. The resulting two-mode squeezed state obviously 
can approach unit fidelity when used for quantum teleportation. 
Though conceptually interesting (the amount of entanglement in- 
herent in an entangled state built with one squeezer is arbitrarily 
large for sufficiently large squeezing and hence there is no fidelity 
limit), this would not be the most practical way to achieve high- 
fidelity quantum teleportation. The entire teleportation process 
would require three squeezers with squeezing 2r, r, and r, in- 
stead of only two r-squee zers needed to produce the "canonical" 
two-mode squeezed state iB qwen et al ., 2003a: Ivan Lo Tdl 12003 

id L 



van Loock and Braunstcin, 2003). 



Finally, iGrosshans and Grangierl l)200l|) advertise 
-Fav < 2/3 as the fidelity boundary between classical 
and quantum teleportation of arbitrary coherent states. 
Exceeding this bound would also require an EPR chan- 
nel with more than 3 dB sque ezing. The reasoning by 
IGrosshans and Grangierl l|200ll ) is that only when Bob 
receives a state with F av > 2/3, it is guaranteed that 
nobody else (neither Alice nor an eavesdropper "Eve" ) 
can have an equally good or better copy. Otherwise, 
two copies of the unknown input state with F av > 2/3 
would exist which contradicts the no-cloning boundary 
for coherent-state duplication (see Sec. 0). On the 
other hand, when Bob receives for example a state with 
1/2 < F av < 2/3, Alice might have locally made two 
asymmetric copies, one with F av > 2/3 and one with 
1/2 < F av < 2/3. She might have sent the worse copy to 
Bob via a perfectly entangled (or sufficiently entangled) 
EPR channel and kept the better copy. Thus, according 
to G rangier and Grosshans, the "q uantum faxing" re- 
gion ()Grosshans and Grangie'il l200l|) . 1/2 < F av < 2/3, 
does not indicate true quantum teleportation of coher- 
ent states. Similarly, one would have to give the re- 
gion 2/3 < F av < 5/6 (where 5/6 is the qubit dupli- 
cation limit, see Sec. 01 an analogous status of only 
quantum faxing when teleportation of arbitrary qubits 
is considered. By contrast, the fidelity boundary be- 
tween classical and quantum teleportation of arbitrary 
qubit states, analogous to that of arbitrary coh erent 
states in Eq. fT75jl . is F av < 2/3 l|Barnuml ll99S|) . A 
detailed discussion about the different fidelity bound- 
aries for coherent-state telep ortation can be found in 
Ref. l|Braunstein et all\2001d) . 

What are the "right" criteria for cv quantum telepor- 
tation among those discussed above? What the most 
appropriate criteria in a specific scenario are certainly 
depends on the particular task that is to be fulfilled 
by quantum teleportation. For example, using quan- 
tum teleportation of coherent states as a subroutine 
for quantum cryptography, th e security is (to some ex- 
tent) ensured by F av > 2/3 l)Grosshans and Grangierl 
120011) . However, for an input alphabet of coherent states 
to be transferred, a rigorous boundary that unambigu- 
ously separates entanglement-based quantum teleporta- 
tion schemes from schemes solely based on classical com- 
munication is given by F av < |, Eq. I|175(l . 

Another possible way to assess whether a cv teleporta- 
tion scheme is truly quantum is to check to what ex- 
tent nonclassical properties such as squeezing or pho- 
ton antibunching can be preserved in the teleported field 
iLLi et all l2002aj) . Once Alice and Bob do not share 
entanglement [for instance, when the pure two-mode 
squeezed v acuum state bec omes mixed in a thermal en- 
vironment l|Lee et all |2000)] , nonclassical properties can 
no longer be transferred from Alice to Bob. Let us now 
consider the teleportation of a truly quantum mechanical 
system, namely an electromagnetic mode entangled with 
another mode. This entanglement shall be transferred to 
a third mode via quantum teleportation. 
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3. Entanglement swapping 

In the thr ee optical telepor ta tion experiments 
in Innsbruck llBouwmeester et all Il997ft. in Rome 
llBoschi et all 1 1998ft . and in Pasadena~ i|Furusawa et all 
Il998ft . the nonorthoeonal input states to be teleported 
were single-photon polar i zation states ijBoschi et all 
Il998t iBouwmeester et a 0, 119971) and coherent states 
l)Furusawa et all Il998ft . From a true quantum telepor- 
tation device, however, we would also require the capa- 
bility of teleporting the entanglement source itself. This 
teleportation of one half of an entangled state ( "entangle- 
ment swapping") was first introduced for single-photon 
polarization states (Zu kowski et a/l ll993). In general, it 
allows for the entanglement of two quantum systems that 
have never directly interacted with each other. A demon- 
stration of enta nglement swappin g with single photons 
was reported bv lPan et all l|l998ft . Practica l uses of en- 
tangl ement swapping hav e been suggested |Bose et all 
ll99Sl ll QQflt iBries-el et all ll99St iDiir et all Il999aft and 
it has also been generalized to multiparticle systems 
l|Bose et aZ.I . Il998^> . All these investigations have referred 
exclusively to dv systems. 

Involving continuous variables, there have been sev- 
eral theoretical p roposals for an entanglement swap- 
ping experiment. iPolkinghorne and Ralph! l)l999ft sug- 
gested teleporting polarization-entangled states of sin- 
gle photons using squeezed-state entanglement (in the 
limit of small squeezing) where the output correla- 
tions are verified via Bell inequalitie s. iTanl l)l999ft 
and Ivan Loock and Braunsteml l)2000bft considered the 
unconditional teleportation (without post-selection of 
"successful" events by photon detections) of one half 
of a two-mode squeezed state using quadrature Bell 
meas urements and different ver i fication schemes. In 
Ref. ijvan Loock and Braunsteirt . 2000b), entanglement 
swapping is verified through a second quantum telepor- 
tation processjutilizing the entangled output state. In 
Ref. IjTanl [1999J), the output entanglement is verified 
via Eq. (|112[1 using unit-gain displacements and hence 
requiring more than 3 dB squeezing. The gain, how- 
ever, can be optimized, enabling a ver ification of entan- 
glement swapping for any squeez ing ijvan Loockl 120021: 
Ivan Loock and BraunsteinL l2000bft . 

Choosing the right gain is essential in entan- 
glement swapping, for instance, in order to opti- 
mize the fidelity in a second round of teleporta- 
tion (Ivan Loock and BraunsteinL l2000bft or to max- 
imize the violations of Bell inequalities at the 
output in the low-squeezing (single-photon) limit 
ijPolkinghorne and Ralph) . ^999). The explanation for 
this is as follows: if the conditional states are displaced 
with the right gain, they no longer depend on the Bell 
measurement results, always being transformed to the 
same canonical two-mode squeezed state. The opti- 
mal scheme then leads to a pure ensemble output state. 
Even after averaging upon all incoming states and mea- 
surement results, the output remains a pure two-mode 



squeezed vacuu m state with a ne w squeezing parameter 
R modified by ijvan Loockl 12002ft . 

tanhi? = tanhr tanhr' . (179) 

Up to a phase-space displacement, the resulting ensem- 
ble state is then the same as the projected displaced two- 
mode squeezed state for a single shot of the cv Bell mea- 
surement. In Eq. I|179|) . r and r' are the squeezing pa- 
rameters of the two initial entangled two-mode squeezed 
states. For any nonzero squeezing and hence entangle- 
ment in both input states, r > and r 1 > 0, entanglement 
swapping occurs, i.e., R > 0. However, the quality of the 
entanglement always deteriorates, R < r and R < r' , 
unless either of the input states approaches a maximally 
entangled state, r — > oo and hence R = r', or r' — > oo, 
thus R~r. 

As a co n sequen ce, in a quantum repeater 
ijBriegel et all Il998ft . connecting many segments of 
a quantum channel via cv entanglement swapping, after 
purifying the mixed entangled states in each segment 
to pure ones (two- mode squeezed states), will produce 
never vanishing, but increasingly small entanglement 
between the ends of the channel. This statement, 
however, is restricted to an entanglement swapping 
protocol based on cv (quadrature) Bell measurements. 

B. Dense coding 

Dense coding aims to use shared entanglement to 
increase the capacity of a communication channel 
({Bennett and Wiesnerl Il997ft . Relative to quantum 
teleportation, in dense coding, the roles played by 
the quantum and classical channels are interchanged. 
Dense coding was trans lated t o continuous quantum 
variab les by iBanl l)l999ft and iBraunstein and Kimbld 
(2000). It' was shown that by utilizing the entangle- 
ment of a two-mode squeezed state, coherent commu- 
nication (based on coherent sta tes) can always be beaten 
ijBraunstein and KimbleL l2000ft . The cv scheme attains 
a capacity approaching (in the limit of large squeezing) 
twice that t heoretically achievable in the a bsence of en- 
tanglement l)Braunstein and KimbleL 12000ft . Before we 
discuss how dense coding can be implemented with con- 
tinuous variables we shall review the ideas behind quan- 
tifying information for communication. 

1. Information: a measure 

In classical information theory one constructs a mea- 
sure of information which tries to capture the 'surprise' 
attached to receiving a particular message. Thus mes- 
sages which are common occurrences, are assumed to 
contain very little useful information, whereas rare mes- 
sages are deemed valuable and so containing more infor- 
mation. This concept suggests that the underlying sym- 
bols or letters or alphabet used to transmit the message 
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are themselves unimportant, but only the probabilities of 
these symbols or messages. 

In addition to this conceptual framework, it turns out 
that the measure of information is essentially unique if 
one takes it to be additive for independent messages. 

To formalize the idea of an alphabet we define it to be 
a set A = {a : a G A} of symbols a each of which has 
an associated probability p a . The information content 
of such an alphabet will be denoted 1(A). The average 
information content per letter in alphabet A is given by 

1(A) = -Y,P* l °£bPa ■ (180) 

a 

This result is the unique measure of average information 
per letter. 

2. Mutual information 

In order to quantify the information in a communica- 
tion channel we must introduce a measure of information 
corresponding to the amount of information accessible to 
the receiver which contains information about the mes- 
sage sent. This suggests we attempt to quantify the infor- 
mation mutual (or common) to a pair of alphabets A and 
B. If these two alphabets have letters with probabilities 
given by p a and Pf, respectively, and if the joint alphabet 
AB has letters with probabilities p a b (we no longer as- 
sume these alphabets are independent), then the natural 
information theoretic measures for these three quantities 
are given by 

1(A) = -^2p a \0gp a 

a 

1(B) = -^2p b \ogp b 

b 

I(A,B) = -J2Pabl0gPab • (181) 
ah 

The so-called mutual information I(A : B) in a pair of 
alphabets is given by 

I(A:B) = 1(A) + 1(B) - I(A,B) 




(182) 



The idea behind this equation is that the sum I(A)+I(B) 
accounts for the joint information in both alphabets, but 
double counts that part which is mutual to both alpha- 
bets. By subtracting the correct expression for the joint 
information I(A, B) we are left solely with the informa- 
tion that is common or mutual. 

3. Classical communication 

We are now in a position to apply our expression for 
the mutual information to quantify the information re- 
ceived through a communication channel that contains 



information or that is mutual or common to the informa- 
tion actually sent. 

Let us suppose the sender, called Alice, has a source al- 
phabet A with probabilities p a ■ For each letter a sent the 
receiver, called Bob, tries to determine its value through 
observation at his end of the channel. However, because 
of whatever source of noise or imprecision in general Bob 
will see an alphabet B which is not identical to Alice's. 

For simplicity, we shall suppose that the channel has no 
memory so that each signal sent is independent of earlier 
or later channel usage. In this case, we may characterize 
the channel by the conditional probabilities Pb\ai for the 
probability of observing letter b in Bob's alphabet, given 
that Alice sent letter a. The joint probability is therefore 
given by 

Pab = Pb\aPa ■ (183) 

Given these expressions the mutual information content, 
per usage of the channel, in Bob's received data about 
Alice's messages is 

I(A:B) = Y / Pb\aPalog(^) . (184) 

ab 

If we optimize this expression over Alice's alphabet we 
can determine the maximum achievable throughput per 
usage. This is called the channel's channel capacity and 
is given by 

C = max I(A : B) . (185) 

{Pa} 

4. Classical communication via quantum states 

Ultimately, Alice must use some physical carrier to rep- 
resent the letters she sends. For simplicity of notation we 
shall tie the physical states she generates together with 
any modifying effects from the channel. Thus we shall 
say that to represent a letter a from her alphabet A that 
Alice produces a quantum state p a . Since letter a is 
generated with probability p a the mean channel state is 
simply 

P = ^2p a Pa- (186) 

a 

Now let us suppose that Bob uses some generalized 
measurement (POVM) Eb, satisfying Eq. (|159fl . to try to 
extract information about the letter Alice was trying to 
send. When Bob is presented with a state p a representing 
letter a from Alice's alphabet, he will find instead letter 
b from his own alphabet with a conditional probability 
given by Eq. (|16Uf) . from which one may compute the 
mutual information I (A : B ) using Eq. 1J182I) . 

The famous result from Holcvo (1998) allows us to 
place an upper bound on this mutual information via 
Eq. Q158p . We note that either bound is independent 
of Bob's measurement strategy, so an achievable upper 
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FIG. 4 Communication channel with a) optimal number-state 
alphabet; b) coherent-state alphabet; and c) squeezed-state 
alphabet. 

bound will allow us to determine the channel capacity for 
transmitting classical information using quantum states. 
In fact, when this strategy works it reduces the calcula- 
tion of the channel capacity to one of performing a max- 
imum entropy calculation. 

When the states used to send information are from 
an infinite-dimensional Hilbert space (such as a single- 
mode bosonic field) we must place some constraint on 
the channel usage in order to get a finite value for this 
capacity. The canonical constraint in such circumstances 
is to presume that there is a constraint on the mean num- 
ber of quanta that may pass down the channel per usage 
(n) = h. For this constraint, the maximum entropy may 
be interpreted as the channel capacity achieved when Al- 
ice uses an alphabet of number st ates distributed accord- 
ing to a thermal distributio n ijCaves and Drummondt 
ll994UYuen and Ozawai llQfll . In this case, the channel 
capacity is given by 

C = (l + n)ln(l + n) -nlnn (187) 
~ 1 + In h , 

for large n. 

Given a constraint on the mean number of photons 
per channel usage (n) — n we shall now compare three 
choices of alphabets for transmission by Alice, see Fig.@] 
Fig. 0Ji shows the optimal strategy using an input alpha- 
bet of number states and ideal photon-number detection. 
Fig. shows the channel with the same constraint op- 
crating with an input alphabet of coherent states and 
an heterodyne detection. With this extra constraint on 
the input alphabet the maximal throughput is given by 
l|GordodlT^IShel.lT968tlYamamoto and Hausl Il986j) 

C coh = ln(l + n) ~ Inn . (188) 

Finally, if Alice uses a strategy involving a squeezed state 
alphabet (labeled by the displacements x) and homodyne 



det ection, see F ig. Ek, the max imal throughput is given 
by l)Yamamoto and Hausl Il986|) 

C sq = ln(l + 2n)~ln2 + lnn. (189) 

We can see that for large n each of these schemes has a 
capacity which differs by only around one bit per usage! 

5. Dense coding 

In dense coding, Alice and Bob communicate via two 
channels, however, Alice only needs to 'modulate' one of 
them. The second channel is used to transmit one half of 
a standard (entangled) state to Bob; since this channel is 
not modulated it may be sent at any time, including prior 
to its need for communication. In this way, part of the 
communication channel may be run off-peak. Classically 
there is no way to achieve this sort of operation. 

In general, Alice's local action is sufficient to span a 
system with the square of the Hilbert-space dimension of 
the piece she holds. Since information is essentially the 
logarithm of the number of distinguishable states, 

log(n 2 ) = 21ogn , (190) 

one can generally expect a doubling of the channel ca- 
pacity. This accounting assumes that the off-peak usage 
required to transmit the shared entanglement, or to oth- 
erwise generate it, comes at no cost. 

Consider the specific case of EPR beams (1,2) approxi- 
mated by the two-mode squeezed state with Wigner func- 
tion 

WWK,a 2 ) (191) 
= —z exp[- e - 2r (ai - a 2 )| - e 2 ' "(ai - a 2 )j 

- e 2r ( ai + oi 2 )\ - e- 2r ( ai + a 2 ) 2 ] , 

where the subscripts R and / refer to real and imaginary 
parts of the field amplitude a, respectively. 

As shown in Fig. signal modulation is performed 
only on Alice's mode, with the second mode treated as 
an overall shared resource by Alice and Bob. The modu- 
lation scheme that Alice chooses is simply to displace her 
mode by an amount a. This leads to a displaced Wigner 
function given by W / epr(«i — o;,q; 2 ), corresponding to 
the field state that is sent via the quantum channel from 
Alice to Bob. 

Upon receiving this transmitted state (consisting of Al- 
ice's modulated mode), the final step in the dense-coding 
protocol is for Bob to combine it with the shared resource 
he holds and retrieve the original classical signal a with 
as high a fidelity as possible. As indicated in Fig. [S] this 
demodulation can be performed with a simple 50 : 50 
beam splitter that superposes these modes to yield out- 
put fields that are the sum and difference of the input 
fields and which we label as (3\ and respectively. The 
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FIG. 5 Schematic of dense coding scheme: An EPR pair is 
created and one half sent to Bob. The other half is given to 
Alice who modulates it by performing a phase-space transla- 
tion by the amount a. This half is now passed on to Bob who 
recombines the two halves and performs a pair of homodyne 
measurements on the sum and difference fields. These signals 
Pir and P21 will closely mimic a for a sufficiently strongly 
entangled state. 



resulting state emerging from Bob's beam splitter has 
Wigner function 

Wsum/diffOSl,/^) (192) 
= Wepr((A + P 2 )/V2 - a, (A - A0/V2) . 

The classical signal that we seek is retrieved by homo- 
dyne detection, which measures the analogues of position 
and momentum for the sum and difference fields (Pi, fo) ■ 
For ideal homodyne detection the resulting outcomes are 
distributed according to 



2e 



2r 



■exp(-2e 2r |/3-a/\/2| 2 ) , 



(193) 



where (3 = Pm + 1P21 and represents a highly peaked 
distribution about the complex displacement a/^/2. For 
large squeezing parameter r this allows us to extract the 
original signal a which we choose to be distributed as 



Pa 



A^expHalVa 2 ) 



(194) 



Note that this displaced state has a mean number of pho- 
tons given by 



n = cr + sinh r 



(195) 



In order to compute the quantity of information that 
may be sent through this dense-coding channel we note 
the unconditioned probability for the homodyne statis- 
tics is given by 
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ir(a 2 + e- 2r ) 6XP V a 2 + < 



(196) 



The mutual information describing the achievable infor- 
mation throughput of this dense-coding channel is then 
given by 



H d ™ sc (A:B) = J d 2 (3d 2 a P0laPa \n 



fP0\c 



V Pa 

= ln(l + a 2 e 2r ) . (197) 

For a fixed n in Eq. i|195f) this information is optimized 
when n = e r sinhr, i.e., when a 2 = sinh r cosh r so yield- 
ing a dense-coding capacity of 



(198) 



C* dcnsc = ln(l + h + n 2 ) , 
which for large squeezing r becomes 

C dcnsc _ 4r _ ( lg9 ) 

How efficient is this dense coding in comparison to sin- 
gle channel coding? Let us place a 'common' constraint 
of having a fixed mean number of photons n which can 
be modulated. The maximal channel capacity as given 
in Eq. (|187f) and substituting n = e r sinh r gives 



C~2r, 



(200) 



for large squeezing r. This is just one-half of the asymp- 
totic dense coding mutual information, see Eq. (|199fl . 
Thus asymptotically, at least, the dense coding scheme 
allows twice as much information to be encoded within 
a given state, although it has an extra expense (not in- 
cluded within the simple constraint h) of requiring shared 
entanglement. 

It is worth noting that this dense coding scheme does 
not always beat the optimal single channel capacity. In- 
deed, for small squeezing it is worse. The break-even 
squeezing required for dense coding to equal the capac- 
ity of the optimal single channel communication is 



^brcak— even 



0.7809 



(201) 



which corresponds to roughly 6.78 dB of two-mode 
squeezing or to n ~ 1.884. This break-even point takes 
into account the difficulty of making highly squeezed two- 
mode squeezed states. No similar difficulty has been fac- 
tored into making ideal number states used in the bench- 
mark scheme with which our dense coding scheme is com- 
pared. 

A fairer comparison is against single-mode coherent 
state communication with heterodyne detection. Here 
the channel capacity is given by Eq. I|188[) and is always 
beaten by the optimal dense coding scheme described by 

Eq. frasji . 

An improvement on coherent state communication is 
squeezed state communication with a single mode. The 
channel capacity of this channel is given by Eq. (|189|) and 
is beaten by the dense coding scheme of Eq. I|198fl f° r 
n > 1, i.e., the break-even squeezing required is 



break- 



0.5493 , 



(202) 
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which corresponds to 4.77 dB. 

Note that this cv protocol should allow for high ef- 
ficiency, unconditional transmission with encoded infor- 
mation sent every inverse bandwidth time. This situation 
is in contrast to implementations that employ weak para- 
metric down conversion, where transmissio n is achieved 
condit ionally and relatively rarely. In fact. lMattle et all 
(1996) obta ined rates of only 1 in 10 7 per inverse band- 
width time llWeinfurteit ll998). By going to strong down 
conversion and using cv entanglement, much higher effi- 
ciency should be achievable. 

It should be noted that one feature about dense coding 
is our assumption that the shared entanglement may be 
sent off-peak. This implicitly assumes that the entangle- 
ment can be stored (possibly for long periods of time). 
Continuous-variable entanglement has now been shown 
to be easy to create in collective atomic states and to be 
efficientl y transformable back an d forth to optical entan- 
glement '(.Tulssaar d~e£ all l200lft (see Sec. lTvTl , Thus, 
although the storage times are still very small, there is 
potential for a high-bandwidth technology here. 



C. Quantum error correction 

Let us now proceed with a few remarks on an alter- 
native method for the reliable transmission of quantum 
information, which is not based on shared entanglement 
such as quantum teleportation combined with entangle- 
ment distillation (the latter is the subject of Sec. | IV.El . 
This method is called quantum error correction (Shor, 
119951) . 

In a quantum error correction scheme used for com- 
munication purposes, quantum states are sent directly 
through a potentially noisy channel after encoding them 
into a larger system that contains additional auxiliary 
subsystems. When this larger system is subject to errors 
during its propagation through the quantum channel, un- 
der certain circumstances these errors can be corrected 
at the receiving station and the input quantum state can 
be retrieved, in principle, with unit fidelity 

For discrete variables, a lot of theoretical work on 
quantum error correction has be e n done, for example 
in R e fs. llCalderbank et~al\ . Il997t iKnill and Laflammel 
Il997t IShoit Il995ft . Shortly after the proposal for the 
realization of cv teleportation, the known qubit quan- 
tum error correction codes we r e translated to con t inuou s 
variables l)Braunsteinl Il998at iLlovd and Slotind. Il998ft . 
These schemes appeared to require active nonlinear op- 
erations such as quantum non-demoli tion coupling for th e 
implementation of the C-NOT gate (|Braunsteirl Tl998a'l . 
However, later it turned out that also cv quantum er- 
ror correction codes can be implemented us ing only lin- 
ear op tics and resources of squeezed light l)Braunsteinl 
Il998bft. Th i s was s hown for the nine-wavepacket code 
llBraunsteinl Il998bft . the analogue of Shor's nine-qubit 
code llShoit Il995ft ~ An open question is still how to im- 
plement the five-wavepacket code using only linear optics 



and squeezed light. 

A more robust set of quantum error-correcting 
codes over con t inuou s variables was proposed by 
iGottesman et all (|200lfl . These codes protect dv quan- 
tum information, i.e., states of a finite-dimensional sys- 
tem, from decoherence by encoding it into the infinite- 
dimensional Hilbcrt space of a cv system ("an oscilla- 
tor"). The advantage of this variatio n over the codes 
descri bed above is that the codes from IGottesman et al\ 
l)200lft allow the effective protection against small "dif- 
fusive" errors, which are closer to typical realistic loss 
mechanisms. In the codes discussed above, small errors 
comparable or smaller than readout errors cannot be cor- 
rected and are additive with each "protective" operation. 



D. Quantum cryptography 

In this section, we give an overview of the various pro- 
posals of continuous-variable quantum cryptography (or 
quantum key distribution). We further discuss the ab- 
solute theoretical security and the verification of experi- 
mental security of cv quantum key distribution. Finally, 
we will conclude this section with a few remarks on quan- 
tum secret sharing with continuous variables. 



1. Entanglement-based versus prepare and measure 

For qubit-based quantum cryptography there have 
been two basic schemes. Those involving the sending 
of states from non-or thogonal bases, such as the origi- 
nal "BB84 protocol" ijBennett and Brassard! Il984ft . and 
those based on sharing entanglement between the sender 
and receiver, such as Ekert's scheme l|Ekertlll99l|) . The 
protocols without entanglement may be termed "prepare 
and measure" schemes, where Alice randomly prepares 
a sequence of non-orthogonal states to be sent to Bob 
and Bob measures these states in a randomly chosen ba- 
sis. In general, the entanglement-based schemes, with- 
out Ekert's approach using Bell inequalities, can also 
be interpreted as state preparation at a distance. Due 
to the entanglement, the states nonlocally prepared at 
the receiving station should be correlated to the sender's 
states which are measured in a randomly chosen ba- 
sis. The entanglement-based schemes are then equivalent 
to sc hemes such as the BB84 protocol (Be nnett et all 
11992ft . 

Conversely, it has been shown that the presence of en- 
tanglement in the quantum state effectively distributed 
between Alice and Bob is a necessary precon dition for any 
secur e quantum key distribution protocol (jCurtv et all 
12004ft . In this sense, the notion of entanglement can be 
recovered in the prepare and measure schemes which do 
not appear to rely upon entanglement. The crucial point 
is that the correlations given by the classical data of Al- 
ice's and Bob's measurements, described by a joint clas- 
sical probability distribution P(A,B), must not be con- 
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sistent with a separable state (jCurtv et all 12004). This 
requirement is independent of the particular physical im- 
plementation, where usually the prepare and measure 
schemes seem more practical than those based on the 
distribution of entanglement. Thus, a first test of secure 
quantum key distribution is to check for (optimal) en- 
tanglement witnesses (observables that detect entangle- 
ment), given a set of local opera tions and a correspo nding 
classical distribution P(A, B) l|Curtv et all 12004ft . An 
example for such an entanglement witness would be the 
viola tion of Bell inequalities as in Ekert's scheme l)Ekertl 
11991ft . However, even if there are no such violations, a 
suitable entanglement witness to prove the presence of 
quantum correlations may still be found. In the cv case, 
a particularly practical witness is given by the Duan cri- 
terion in Eq. I|110|) or Eq. I|114[) . based solely upon ef- 
ficient homodyne detection. Now bearing in mind that 
any secure quantum key distribution scheme must rely 
upon the effective distribution of entanglement, a simi- 
lar categorization into prepare and measure schemes and 
those based on entanglement can be made for the various 
proposals of cv quantum cryptography. 



2. Early ideas and recent progress 

The schemes that do not rely on entanglement are 
mostly based on alphabets involving (non-orthogonal) 
coherent s tates as the signal states. For example, 
iMu et all l)l996ft utilize four coherent states and four 
specific local oscillator settings for the homodyne de- 
tection, e nabling the receiver to conclusively identify a 
bit value. Hu ttner et al\ l)l995ft use generalized measure- 
ments (POVM's) instead, which may sometimes yield 
inconclusive results for a bit value encoded in weak co- 
herent states. The scheme of Huttner et al. is actu- 
ally a combinati on of the BB84 ((Bennett and Brassardi 
Il984ft and "B92" l)Bennetd . ll992T) qubit protocols, the lat- 
ter of which requires just two arbitrary non-orthogonal 
states. The basic idea behind this combination is to make 
the two states in each pair of basis states, which are 
orthogonal in BB84, non-orthogonal instead as in B92. 
By using non-orthogonal states in each pair, one gets 
the additional advantage of the B92 protocol, namely, 
that an eavesdropper ( "Eve" ) cannot deterministically 
distinguish between the two states in each basis. The 
usual disadvantage of not being able to create single- 
photon states, but rather weak coherent-state pulses 
(where pulses on average contain less than one photon), 
is then turned into a virtue. How a receiver optimally 
distinguishes between two coherent si gnal states for th ese 
coherent-state schemes was shown bv lBanaszeld l|l999ft to 
be possible using a simple optical arrangement. 

The use of squeez ed states rathe r than coherent states 
was investigated by iHillervl l)2000ft . His analysis of se- 
curity, explicitly including the effects of loss, is in some 



sense realistic, though ignoring collective attacks. 6 In 
addition, two kinds of eavesdropper attack are studied: 
man-in-the-middle (or intercept-resend) measuring a sin- 
gle quadrature; and quantum-tap using a beam split- 
ter after which again only a single quadrature is mea- 
sured. Hillery found that losses produce a significant 
degradation in performance, however, he suggested that 
this problem could be ameliorated by pre-amplification. 

The entanglement-based quantum cryptographic 
schemes within the framework of cv quantum optics 
rely on the corre lations of the quadratures of two- mode 
squeezed states. ICohenl lll997ft considered the idealized 
case with an unphysical infinite amount o f squeezing to 
give p erfect correlations. More realistically. iPereira et all 
(2000) (which we note was first circulated as a preprint 
in 1993) considered 'cryptography' based on finitely 
squeezed two-mode light beams (their paper described 
a scheme more reminiscent of dense coding than of a 
standard quantum cryptographic protocol, since it is 
based on preshared entanglement and the transmission 
of one half of the entangled state) . 

Ralph] Il2000aft has considered cv quantum cryptogra- 
phy in two variations: first, a scheme where the informa- 
tion is encoded onto just a single (bright) coherent state, 
and second, an entanglement-based scheme, where the 
bit strings are impressed on two (bright) beams squeezed 
orthogonally to each other before being entangled via a 
beam splitter (i.e., becoming entangled in a two- mode 
squeezed state). In assessing these schemes, Ralph con- 
sidered three non-collective attacks by Eve. The first two 
involved the eavesdropper acting as man-in-the-middle; 
in one by measuring a fixed quadrature via homodyne 
detection and in the other by measuring both quadra- 
tures via heterodyne detectio n [or an Arthurs-Ke l ly typ e 
double homodyne detection ((Arthurs and Kellyl Il965j) ] 
and reproducing the signal based on the measured val- 
ues. The third used a highly asymmetric beam splitter 
as a quantum 'tap' on the communication channel after 
which simultaneous detection of both quadrat ures [again 
a la Arthurs-Kelly ll Arthurs and Kellyl ^65)] was used 
to maximize information retrieval. 

In his former, entanglement-free scheme, Ralph found 
that the third of his three eavesdropping strategies al- 
lowed Eve to obtain significant information about the 
coherent state sent with only minimal disturbance in the 
bit-error rate observed between Alice and Bob. Thus, 
this first scheme proved inferior in comparison to nor- 
mal qubit scenarios. By contrast, his entanglement- 
based scheme apparently gave comparable security to 



common ly, a distinct i on is m ade between three different classes of 
attacks ( Liitkenhaus, 2002): in an individual attack, each signal 
is coupled to a probe, and each probe is measured independently 
of the others, whereas in a collective attack, several probes are 
collected and measured jointly; the most general attack is the co- 
herent attack in which many signals are coupled to many probes 
followed by a collective measurement of the probes. 
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qubit schemes when analyzed against the same three at- 
tacks. Indeed, for this entanglement-based scheme a po- 
tential eavesdropper is revealed through a significant in- 
crease in the bit-error rate (for a sample of data sent 
between Alice and Bob). Ralph has also considered an 
eavesdropping strategy based on quantum teleportation 
and shows again that there is a favorable trade-off be- 
tween the extractable classical information and the dis- 
turban ce of the signals passed on to the receiver (Ralph, 
I2000bl) . We note, however, that enhanced security in 
this entanglement-based scheme requires high levels of 
squeezing a nd low levels o f loss in the channel. Ralph's 
latter work llRalpbi EoOOb) includes an analysis of losses. 

iReidl (12000ft has considered a similar scheme, exploit- 
ing the "Heisenberg correlations" [Eq. l|14(j|) ] between the 
modes of a two-mode squeezed state. In fact, this scheme 
is dir ectly analogous to Ekert's qubit scheme ijEkerti 
where the protection against Eve is provided by 
Alice and Bob being able to observe a Bell inequality vi- 
olation. The security analysis was limited to studying 
a quantum-tap based attack using a beam splitter and 
measurement of a single quadrature. In addition, like 
Hillcry and Ralph, Reid includes losses in her analysis. 

Finally, we note tw o other theoretical works by 
ISilberhorn et al\ (|2002eJ) (an entanglement-ba sed pro- 
tocol - ) and bv iGrosshans and Grangierl l)2002j) (a pro- 
tocol solely relying upon the non-orthogonality of co- 
herent states). Very recently, the latter scheme based 
on coherent sta t es wa s implemented experimentally 
llGrosshans et all 120031). It is also demonstrated in 
Ref. ijGrosshans et al\ . \200^ that this protocol is, in prin- 
ciple, secure for any value of the line transmission rate. 
Initially, a line transmission below 50%, corresponding to 
line loss above 3 dB, was thought to render secure key dis- 
tribution impossible. Conversely, a scheme with line loss 
< 3 dB was considered secure (to some extent), because 
the no-cloning bound for coherent states (Sec. 0) pre- 
vents Eve from obtaining better signals than Bob (when 
Eve replaces the lossy channel by a perfect one and em- 
ploys beam-splitter based cloning of the coherent signals 
as the supposedly optimal eavesdropping strategy). As 
for the existence of secure schemes beyond the 3 dB 
loss limit, one should realize that the entanglement of 
a cv resource (two- mode squeezed states), though being 
degraded , never vanishes comple t ely for any degree of 
the loss ()Braunstein et all l200ld iDuan et all l2000bj) . 7 
In other words, the necessary preconditio n for secure 
key di stribution according to the theorem of lCurtv et al\ 
(2004), namely the presence of quantum correlations, can 
be satisfied for any line loss. Let us briefly discuss how 
this potential security of schemes beyond 3 dB loss may 



note that this sta tement no longer holds true when excess nois e 
is present as well iBraunstein et all 1200 Id IDuan et al, 2000b ) . 
Correspondingly, in the presence of any finite excess noise, a loss 
limit for secure ke y distribution does exist fo r any coherent-state 
based cv scheme tNamiki and Hirand \2004> . 



be exploited, especially by utilizing classical techniques. 

The information-theoretic condition for secure commu- 
nication, i.e., for enabling extraction of a secur e key us- 
ing privacy amplification ([Bejmefrt_et_aLl LL995J ) and er- 
ror correction techniques ({Brassard and Salvailll994|) . is 
given by the following relation for the mutual information 
[Eq. Q182f> ] between the participants, 

I(A : B) > max{/(A : E),I(E : B)} . (203) 

In other words, the mutual information between Alice 
and Bob, I {A : B), must exceed the information that 
either of them shares with Eve. For losses beyond 3 
dB, the condition I(A : B) > I(A : E) is always vio- 
lated using the classical standard techniques. However, 
there are methods to beat this 3 dB loss limit. One such 
method is using, in addition to the classical techniques, 
entanglement purification and quantum memories, which 
are both presently not available in a feasible form (see 
Sec. lIV.El and Sec. IIV.F|l . Alternatively, one may use 
a "reverse re conciliation" protocol, w hich is the method 
advertised bv lGrosshans et al\ ^2QQ2>). It enables, in prin- 
ciple, security of the scheme in Ref. l)Grosshans et all 
2003) for arbitrarily small line transmission rate. Re- 
verse reconciliation basically means that Alice tries to 
guess what was received by Bob instead of a protocol 
where Bob guesses what was sent by Alice. Another 
promising method to beat the 3 dB loss limit is base d 
on a post-selection procedure (jSilberhorn et 
The implementation of error correction techniques in this 
scheme might be less d emanding than in the scheme of 
IGrosshans et al\ ()2003|) . As for the signals in the post- 
selection based s cheme of |Sjhb^rjiorn_ei 1H (1200211 . like 
in the scheme of iGrosshlm^^^Il^OOsfK simple coher- 
ent states suffice. Note that for the above schemes, 
although it seems likely that the cloning-based beam 
splitting attack is the optimal attack by Eve, an abso- 
lute proof of security would require analyzing more gen- 
eral attacks by Eve [including n on-Gaussian attacks; see 
Ref. llGrosshans and Cerll2004h. where it is shown that 
for the scheme of IGrosshans et al\ |2003), under certain 
reasonable assumptions, the individual Gaussian attack 
is optimal, being superior to any non-Gaussian coher- 
ent attack; not e that this analys i s exclu des the alterna- 
tive protocol of Si lberhorn et al\ (|2002bl) based on post- 
selection] . 

3. Absolute theoretical security 

From single-wavepacket non-collective attacks consid- 
ered above there has been great progress recently for cv 
quantum cryptography in the detailed proof of absolute 
theoretical security for one s c heme (jGottesman et all 
l200lt iGottesman and Preskiil l200l|) . This scheme is 
the cv analogue of the origi nal BB84 scheme. Fol- 
lowing the Shor and Preskiil (jShor and Preskiil I2000T) 
proof for absolute security for the o riginal qubit pro- 
posal, IGottesman and Preskilll l)200l|) have generalized 
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the proof. 

The key theoretical construct is to embed the com- 
munication into the context of quantum error correction 
codes. These are not actually needed to run the proto- 
col, but greatly simplify the proof. Then given provable 
bounds to the quantity of information the eavesdropper 
can have about the key, classical error correction codes 
and classical privacy amplification are used to reduce 
this quantity by any desired amount. This works within 
some bounds of information captured by the eavesdrop- 
per. Further, imperfect resources may be treated as a 
channel defect (or as an effect of eavesdropping) and so 
are also easily included. 

In the protocol considered, a signal is sent as a 
squeezed state with either positive or negative squeez- 
ing (which corresponds to squeezing around conjugate 
quadratures). It is proved that if the noise in the 
quantum channel is weak, squeezed signal states of just 
2.51 dB are suffic ient in principle to en s ure t he pro- 
tocol's security ijGottesman and Preskilll l200lj) . For 
non-squeezing based coherent-state schemes, such a 
proof of unconditional sec urity is not available yet [see 
iGrosshans and CerJ l)2004|) ]. 

Heuristically, it appears that the original rough and 
ready reasoning of security based on single-shot non- 
collective attacks really does impart absolute security. 
This suggests strongly that the protocols discussed pre- 
viously will be found to be similarly absolutely secure 
when enhanced or supplemented by classical error cor- 
rection and privacy amplification. 

Remaining issues appear to be: 

1. ) Re-analysis of this proof in a broadband context. In 
particular, can the protocol be run in a cw manner or do 
complications occur which necessitate pulsed operation. 
For example, in cw operation the signal switching limi- 
tations must be accounted for in addition to limitations 
in the detection process. The answers to this would have 
a sizable impact on the potential bit-rates available. 

2. ) Attempts to use the Shor-Preskill and Gottesman- 
Preskill approach to try to complete the proofs of abso- 
lute theoretical security for the various schemes consid- 
ered previously. Detailed criteria could then be estab- 
lished for each protocol. This analysis could be of poten- 
tial benefit by providing significant flexibility and hence 
allow for resolution of various implementation-related de- 
sign tensions. 

3. ) Experimental verifiability of the claims of absolute 
security. This last point will be considered now. 



4. Verifying experimental security 

So, we have seen that there are already approaches to 
theoretical proofs for absolute security. Unfortunately, 
such theoretical proofs must be treated somewhat skep- 
tically. Questions must still be asked about how the the- 
oretical ideas were implemented. Were extra Hilbert- 
space dimensions 'written' into during the sending or re- 



ceiving processes by Alice and Bob. It appears that the 
only acceptable approach to truly resolve this problem 
is through experimental criteria. One way of thinking 
about this is in terms of an arms race. We have been 
hurriedly building the defenses, but perhaps neglected 
some subtle loopholes because of unintended mismatches 
between ideal conceptualization and actual realization. 
The question remains: can an eavesdropper find a way 
through our defenses? To find out, it makes most sense to 
take seriously the position of devil's advocate, but in the 
laboratory, and work towards serious eavesdropping sce- 
narios in order to put the intended ideally secure schemes 
through their paces. 

To that end a natural first approach for the eavesdrop- 
per (in the absence of a full quantum computer) would 
be to consider an asymmetric cloning strategy, whereby 
as little or as much information gain versus disturbance 
could be produced. It should be noted that Ralph sug- 
gests using tel eportation as an eavesdropping strategy 
iRalpH 120(101 . This strategy deserves more considera- 
tion, but it unnecessarily limits the eavesdropper to non- 
collective attacks. By contrast, general cloning strategies 
should encompass the same performance, but without 
imposing this restriction. 

ICerf et all l|200l|) have applied the work on optimal 
asymmetric cloning to the question of eavesdropping on 
Gaussian channels. For an individual attack based on 
measuring a random quadrature, the quantum informa- 
tion gain versus disturbance was investigated. They 
showed that the information gained by the eavesdrop- 
per was, in this case, equal to that lost by the receiver. 
This sort of analysis forms a basis for experimentally im- 
plementable verification schemes. The immediate further 
work here is to convert the quantum circuits into realiz- 
able quantum optics hardware. This translation is con- 
sidered in Sec. [3 on the cloning of cv quantum states. 

In summary, there is now one theoretically proven se- 
cure quantum crypto graphic scheme involving quan tum 
continuous variables l|Gottesman and Preskilll 12001^ . It 
seems likely that those schemes which appear secure 
based on individual attacks will be shown to be gener- 
ally secure in a similar manner. If true this would give 
freedom in the approaches taken to implement any fi- 
nal scheme. Questions still remain about the transla- 
tion of theoretical protocols to real implementations and 
whether new loopholes will not be created during this 
phase. 



5. Quantum secret sharing 

Quantum secret sharing can be thought of as a multi- 
party generalization of quantum cryptography where a 
message is not only protected against potential eaves- 
droppers. In addition, the relevant information can only 
be retrieved from several people who collaborate. The 
first quantum secret sharing scheme was proposed for 
qubits using GHZ states as an entanglement resource 
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(|Hillerv et a/J . 11999^1 . The GHZ states are used to split 
information in such a way that if one is in possession of all 
of the subsystems, the information can be recovered, but 
if one has only some of the subsystems, it cannot. This 
statement applies both to cla ssical and to quantum in- 
formation (Hil lerv et all IT999T) . In the former case, a key 
can be established between all participants and using the 
key requires all participants working together. An eaves- 
dropper would introduce errors and could be detected. 
In the latter case, for example, a qubit can be recovered 
after its quantum information has been split into two 
or more parts (obviously, only the former scenario is a 
multi-party extension of what is known as quantum key 
distribution). 

In the context of continuous variables, the analogue 
of the qubit GHZ state, the maximally entangled N- 
mode state J dx | X j X • . . . • X^j IS indeed suitable for quan- 
tum secret sharing. We know that this state is an eigen- 
state with total momentum zero and all relative positions 
Xi — Xj — (i, j = 1,2, ... , N). These correlations may 
be similarly exploited as the two-mode correlations in 
the entanglement-based quantum cryptography schemes. 
In fact, their exploitation is equivalent to the two-party 
sender-receiver scenario when all participants except for 
the sender team up and share the information about local 
momentum measurements to yield a total "receiver mo- 
mentum" . This would enable one to secretly share clas- 
sical information protected against eavesdropping. Of 
course, in a more realistic scenario, the finite squeezing 
that affects the quantum correlations of the cv multi- 
party entangled states [Eq. (|137(l ] must be taken into 
account. 

Continuous- variable sec ret sharing of quantum infor- 
mation was proposed by iTvc and Sanders! l)2002|) . In 
their scheme, as opposed to the c ommunication scenario 
considered bv Hill erv et all l|1999fl . the quantum informa- 
tion is to be shared locally and only sufficiently large (but 
arbitrary) subgroups of all the participants can have ac- 
cess to the secret quantum information. The multi-mode 
entang led states used in the scheme of lTvc and Sandersl 
(2002) are also producible with squeezed light and beam 
splitters. It was already demonstrated experimentally 
how a coherent state can be shared using cv tripartite 
entanglement, where any two of three parties can recon- 
struct the state to s ome extent, but a single party cannot 
l|Lance et all l2004|) . 



E. Entanglement distillation 

In order to transfer quantum information reliably in 
the presence of loss, quantum teleportation must be com- 
bined with entanglement distillation protocols. The com- 
mon security proofs for quantum cryptography are based 
on entanglement distillation too. 

In general, the term "entanglement distillation" refers 
to any procedure that aims at distilling from a partic- 
ular number of imperfectly entangled states a smaller 



number of better entangled states using local opera- 
tions and classical communication. Commonly, a dis- 
tinction is made between distillation schemes for pu- 
rifying mixed entangled states after their two halves 
have been distributed through noisy chann els ["entan- 
glement purification" l|Bennett et all Il996bj) ] and those 
schemes which concentrate a number of pure nonmax- 
imally entangled states into a smaller number of bet- 
ter entangled pure sta tes ["entanglement concentration" 
ijBennett et al.Ul996a|) ]. 

As for the concentration of pure nonmaximally 
entangled states, there are various approaches 
llBennett et all Il996al iBose et all Il999t iNielsenl . Il999t 
iNielsen and Chuand. 12000) . For example, entanglement 
swapping may serve as an entanglement concentration 
protocol capable of turning two copies of a nonmaximally 
entangled state into o ne maxima ll y enta ngled copy with 
nonzero probability l|Bose et all Il999j) . The original 
proposal of entanglement concentration included the 
"Schmidt projection" and the "Procrustean" methods 
l|Bennett et al.Ul996a|) . 

The Schmidt projection method requires at least two 
nonmaximally entangled pairs and becomes efficient for 
large numbers of pairs. It is based on a collective mea- 
surem ent [of the "Hamming weight" ijKave and Moscal 
2001)] of all qubits at one side, projecting all pairs onto 
a subspace spanned by states having a common Schmidt 
coefficient. The measurement result is then classically 
communicated to the other side (alternatively, the same 
collective measurement performed at the other side would 
yield the same result and make classical communication 
dispens able). This method also works for dimensions 
d > 2 ijBennett et al.l . Il996a|) - In the asymptotic limit, 
turning the total state vector of n nonmaximally entan- 
gled input pairs into that of m maximally entangled out- 
put pairs, can be described via the majorization criterion 
for d e terministic entanglement tr ansformations ((Nielsen) . 
119991 INielsen and ChuansL [2000) . In entanglement con- 
centration, we have m < n. 

Another method for entanglement concentration is the 
so-called "Procrustean" method which represents a fil- 
ter operation applied to just a single copy o f a nonmaxi- 
mally entangled state ijBennett et a/lll996a|L With some 
nonzero probability (even for higher finite dimensions) a 
successful filter operation leads to maximum entangle- 
ment. 

So what is known about the distillation of continuous- 
variable entangled states? As for the concentration of 
entanglement, we have seen in Sec. lIV.A.3l that cv entan- 
glement swapping based on Gaussian (quadrature) Bell 
measurements doe s not lead to an enha ncement of the ini- 
tial entanglement ijParker et all hOQO). In fact, the out- 
put entanglement becomes even worse than that of the 
inputs. As opposed to th e entanglement swapping with 
qubits ijBose et all Il999j) . there is no probabilistic ele- 
ment in cv entanglement swapping which may sometimes 
lead to better and sometimes to worse entanglement. 
An example of probabilistic entanglement concentration 
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of a single copy of a pure Gaussian two-mode squeezed 
state into a more highly entangled non-Gaussian (but still 
infinite-dimensional) state via non-Gaus sian operations 
(subtr acting photons) was presented by lOpatrnv et all 

As for the general distillation of entanglement includ- 
ing purification, a "continuous-variable" protocol was 
proposed by Duan et al. based on local photon num- 
ber qu antum non-demolition measurements l(Duan et all 
l2000o]) . The entanglement of bipartite Gaussian states 
can be both c oncent rated and purified using this scheme 
l)Duan et all l2000ct) . Its appl icability to all bipa rtite 
Gaussian states was proven bv lGiedke etall (|2001af) us- 
ing the reduction criterion. In the pure-state case, the 
scheme corresponds to th e Schmidt projectio n method. 
However, though feasible l)Duan et a/.l.l2000d|) . its exper- 
imental realization is very difficult. Moreover, in this 
scheme, the distilled entangled states end up in a finite- 
dimensional Hilbert space. Another cv entanglement 
concentration pr otocol based on a cros s Kerr interaction 
was proposed by iFiurasek et all ()2003|) . 

How to distill Gaussian entangled states in a feasi- 
ble way to obtain better Gaussian or continuous-variable 
entanglement is a very subtle question. In particu- 
lar, recently, it was proven using Gaussian CPTP maps 
that entanglement distillation within the class of Gaus- 
sian states by applying Gaussian operations (which are 
those particularly feasible such as beam splitting, ho- 
modyne detect i on, etc.) is impossible llEisert et all . 
I2002t iFiurasekL l2002t iGiedke and Cirad l2002j) . IrTa 
"continuous-variable" distillation scheme, at some stage 
non-Gaussian states, and hence non-Gaussian opera- 
tions, must be part of the protocol. A possible approach 
to this is to apply a first non-Gaussian step, for instance, 
via a measurement that discriminates between the vac- 
uum state and states containing photons. Subsequently, 
further Gaussian operations m ay be used. Through this 
kind of protocol, p roposed bv lBrowne et all l)2003|) and 
lEisert et all l)2004|) . cv entangled states can be distilled 
into highly entangled approximately Gaussian states. 



F. Quantum memory 

A way of storing continuous quantum information is 
a crucial component of a fully integrated technology. In 
order to be able to store such information for extended 
periods, it seems clear that any suitable scheme will re- 
quire a way of storing it in atomic states. A natural way 
of achieving this is via the collective spin of an atomic 
ensemble, as discussed in Sec. III.FI If the ensemble is 
highly polarized, then small excursions of the collective 
spin away from some fixed axis will mimic the phase- 
space structure of a harmonic oscillator. As the size of 
the ensemble increases, the patch approximating an ideal 
'flat' phase-space increases also. 

A beam-splitter like coupling between optical Stokes 
operators and the collective atomic spin can be achieved 



for strongly polarized off-resonant coupling. In particu- 
lar, for light propagating along the z-axis, the coupling 
is well described by the Jaynes-Cummings model. For a 
sufficiently off-resonant interaction, no population trans- 
fer will occur. Thus, only second-order transitions can 
produce any effect, leading to an effective Hamiltonian 
l|Brune et aH . Il992f) 

H cS cx S Z F Z . (204) 

It has been noted t hat this yields a QND prob e of F z of 
the atomic sample l|Happer and Mathurl . ll967j) . 

In the limit of small interaction times, the equations 
of motion are 




(205) 



and similar equations with Sj interchanged with Fj 
throughout. The constant a depends on several parame- 
ters among which are, for example, the spontaneous emis- 
sion rate of the atoms and the transverse cross section 
and the detuning of the light beam. A beam-splitter like 
coupling may be obtained, for example, between F y and 
S z when the atomic sample is highly polarized along the 
x-axis and for a strongly x-polarized optical beam. By 
having the beam propagate through the sample along 
different directions, any suitable beam-splitter coupling 
between components may be made. This is the basis 
for a series of beautiful cv experiments involving spin - 
squeezed atomic samples (Ku zmich and Polzikl [2003'). 
We will briefly discuss these experiments in Sec. IVII.BI 
and Sec. IV11.GI 



V. QUANTUM CLONING WITH CONTINUOUS 
VARIABLES 

In this section, we investigate the consequences of 
the famous quantum no-cloning t heore m, indepen dently 
found by IWootters and Zurekl l)l982f) and by iDieksl 
(1982), for continuous quantum variables. As mentioned 
in Sec. IIV.DI a potential application of cv quantum 
cloning is to implement eavesdropping strategies for cv 
quantum cryptography. 



A. Local universal cloning 

We now consider the possibility of approximately copy- 
ing an unknown quantum state at a given location using 
a particular sequence of unitary transformations (a quan- 
tum circuit). Entanglement as a potentially nonlocal re- 
source is therefore not necessarily needed, but it might 
be an ingredient at the intermediate steps of the cloning 
circuit. 
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1. Beyond no-cloning 

The no-cloning theorem, originally derived for qubits, 
in general forbids exact copying of unknow n nonorthog- 
onal (or simply arbitrary) quantum states l(Dieksl Il982t 
IWootters and Zurekl Il982l) . The first papers that went 
"beyond the no-cloning theorem" and considered the pos- 
sibility of approximately copying nonorthogonal quan- 
tum states initially referred to qubits and later, more 
generally , to finite-dimensional systems llBrufi et all. 



rally , 

l !' 98^bt iBuzek and Hillervl 119961 iGisin and Massarl 
tlWer 



1997tlWernerlll998!) . Based on these results, a cloning ex- 



periment has b een proposed for qu bits encoded as single- 
photon states l)Simon et all . l2000|) . and two other opti- 
cal qubit clon i ng experiments have been realiz ed already 
llHuang et all l200lHMa,rtmi and MnssiL 1200(1 . 

What about the situation when we have N quan- 
tum systems of arbitrary dimension each prepared in the 
same, but arbitrary input state and we want to convert 
them into M (M > N) systems that are each in a quan- 
tum state as similar as possible to the input state? By 
using an axiomatic approach, 8 Werner was able to derive 
the cloning map that yields the o ptimal N to M cloning 
fidelities for c£-dimensional states l)Wernerl Il998(l 



p = N(d-1)+M(N + 1) ^ FUniv 



M(N + d) 



clon.JV.M 
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For this optimum cloning fidelity, we use the superscript 
"univ" to indicate that any d-dimensional quantum state 
is universally copied with the same fidelity. Let us now 
further investigate universal cloning machines, for both 
discrete and continuous variables. 



2. Universal doners 

A universal doner is capable of optimally copying ar- 
bitrary quantum states with the same fidelity indepen- 
dent of the particular input s tate. Buzek and H i llery's 
universal 1 to 2 qubit doner l|Buzek and Hillervl Il996l) 
leads to two identical copies p a and p b . It is a sym- 
metric universal doner. An asymmetric universal 1 to 2 
doner would distribute the quantum information of the 
input state unequally among the two output states. The 
fidelity of one output state is then better than the opti- 
mum value for symmetric cloning, whereas the fidelity of 



the other output state has become worse. Such a poten- 
tially asymmetric cloning device represents a quantum 
informati on distributor that gener ates output states of 
the form l)Braunstein et ad 12001 aj) 



p a = (l-A 2 )| S ) aa ( S | + — l a 

p b = (l-B 2 )\s) bb (s\ + ^l b 

d 



(207) 



for an arbitrary (/-dimensional input state \s) a — 
\n) a - The p arameters A and B are r elated via 



Z^n=0 ° n 

A 2 +B 2 +2AB/d 



1 l|Braunstein et q/.l . l2001a(l . The two 

extreme cases are when the entire quantum information 
is kept by the original system (A = 0) and when it is com- 
pletely transferred to the other system (B — 0). It fol- 
lows directly from the covariant form of the above density 
operators that the fidelity of the information transfer is 
input-state independent. The second term proportional 
to H/g? in each density operator repres ents "noise" added 
by the information transfer process l|Braunstein et all . 
I2001al> . 

It was shown by iBraunstein et all l)2001al) that the 
above quantum information distributor can be con- 
structed from a single family of quantum circuits. This 
kind of quantum circuit was previously used as a quan- 
tum computational network for universal qubit cloning, 
in which case it consists of four C-NOT gates pairwise 
acting on the input qubit a and two q ubits b and c in 
an entangled state l)Buzek et all Il997[) . For arbitrary 
dimensions, the analogous circuit can be used with C- 
NOT operations generalized to d dimensions, |n) |m) — > 
\n)\n(Bm), and a corresp onding rf-dimensional ent angled 
state of systems b and c llBraunstein et all. 12001a!). In a 
discretized phase spa ce (xh.vi-) |Buiek~ eT aZ]. ll99a ll992t 
iQpatrnv et aZ J . [1995^ . the entangled state has the form 

\x)bc = A\x )b\po)c + B(J2iZl \xk)b\xk)c)/Vd, where 
\xq) and \pq) are "zero-position" and "zero-momentum" 
eigenstates respectively. The continuous limit for this 
state is then obvious, and its regularized form consists 
of quadrature squeezed vacuum states and a two-mode 
squeez ed vacuum state of squeezing r ijBraunstein et all . 
l2001al) . The parameters A and B are then related as 

A 2 



B 2 + 4AB/V4 + 2sinli 2r = 1 and the C-NOT 
operations become co nditional sh i fts in phase space, 
\x)\y) — > \x)\x + y) l)Braunsteiii Il998a(l . Expressed 
in terms of position and momentum operators, the se- 
quence of four generalized C-NOT operations 9 acting 
on modes a (the original), b, and c, can be written as 



It is pointed out by IWerneij l!998fl that the "constructive" ap- 
proach (the coupling of the input system with an apparatus or 
"ancilla" described by a unitary transformation, and then tracing 
out the ancilla) consists of completely positive trace-preserving 
(CPTP) operations. Therefore, any constructively derived quan- 
tum doner is in accordance with the axiomatic definition that 
an admissible cloning machine must be given by a linear CPTP 
map. Conversely, any linear CPTP map can be constructed via 
the constructive approach. 



9 Note that the C-NOT operation |n)|m) — » \n)\n © m) is its 
own inverse only for qubits (d = 2). For higher dimensions, 
U a b = En7m=0 \ n )aa{n\ <g) |n ffi m) bb (m\ and W ab differ describ- 
ing conditional shifts in opposite directions. The same applies to 
the continuous-varia ble C-NOT operation — > \x)\x + y) 
I Brau nsteinL Il998al) . Therefore, there is a slight modifica- 
tion in the sequence of four C-NOT's from d = 2 to d > 2: 
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l)Braunstein et adl2001atlCerf et aZll200C|) 

Uabc = exp[-2i(i c - Xb)pa] exp[-2ix a (pb +pc)] -(208) 

Here, exp(— 2ixkpi) corresponds to a single C-NOT op- 
eration with "control" mode k and "target" mode I (I 
shifted conditioned upon k) . After applying U a bc to mode 
a and the regularized state of modes b and c, the result- 
ing fidelities of the universal continuous-variable quan- 
tum information distributor in the limit of large squeez- 
ing turn out to be F = B 2 for mode a and F = A 2 
for mode b. Symmetric cloning with A = B then means 
A 2 = B 2 = 1/2 for infi nite squeezing and henc e a dupli- 
cation fidelity of 1/2 (jBraunstein et 

Similarly, for universal symmetric A to M cloning of 
arbitrary continuous-variab le states, one obtains the op- 
timum cloning fidelity ijBraunstein et all l2001a|) 



r-iumv,oo 
clon, iV,M 



N 
M 



(209) 



which is exactly the infinite-dimensional limit d — > oo 
of Werner's result in Eq. (|206|l . This result looks sus- 
piciously classical. In fact, in the continuous limit, the 
universal doner simply reduces to a classical probabil- 
ity distributor. For example, the optimum 1 to 2 doner 
can be mimicked by a completely classical device that 
relies on a coin toss. From the two input states of that 
device, the original input state and an entirely random 
state (ideally an infinite-temperature thermal state), ei- 
ther state is sent to output a and the other one to output 
b or vice- versa depending on the result of the coin toss. 
Then, on average, with a small overlap between the orig- 
inal input state and the random stat e, the two output 
clones have a cloning fidelity of 1/2 l)Braunstein et all . 
l2001al) . These observations are further confirmed by the 
fact that there is no entanglement between systems a 
and b at the output of the universal continuous-variable 
doner, as opposed to any univ ersal finite-dimensional 
doner ijBraunstein et a,l\ . 12001 aj) . 

Let us summarize at this point: we have discussed fi- 
delity boundaries for universal N to M doners. These 
boundaries, the optimal cloning fidelities, can in fact be 
attained by means of a single family of quantum circuits. 
There is a universal design for these quantum circuits in 
any Hilbert space dimension and for a given dimension 
these circuits represent universal cloning machines copy- 
ing arbitrary input states with the same optimal fidelity. 
Furthermore, we have seen that the universal continuous- 
variable doner is not very interesting, since it is a purely 
classical device. Does a continuous-variable cloning ma- 
chine possibly become nonclassical and hence more inter- 
esting when it is designed to copy quantum states drawn 



U C aUlJJacU ab . Making the C-NOT its own inve rse U = t/t 
could be achieved by defining — » \x)\x — y) lAlbe r~et alL 
2000). 



from a limited alphabet? We will now turn to this ques- 
tion. 



B. Local cloning of Gaussian states 

1. Fidelity bounds for Gaussian doners 

In the first papers that considered continuous-variable 
cloning, the set of in put states to be copied was restricted 
to Ga ussian states l|Cerf and Iblisdiii l2000al ICerf et 
2000). The optimal cloning fidelity for turning A iden- 
tical but arbitrary coherent states into M identical ap- 
proximate copies, 



F 



cohst,oo 
clon, TV, M 



MN/(MN + M — N) , 



(210) 



was derived bv lCerf and Iblisdirl <l2000al) . The approach 
there was to reduce the optimality problem of the A — > 
M doner to the task of finding the optimal 1 — * oo doner, 
an approach previou sly applied to universal qubit cloning 
iBrufi et oiJ .fl998b). Let us briefly outline the derivation 
for qubits in order to reveal the analogy with that for 
coherent states. 

The operation of the universal N — > M qubit doner 
can be characterized by a shrinking factor T) c i on (N, M), 
shrinking the Bloch vector of the original input state 
llPreskili ll998) 



(211) 



so that the output density operator of each copy becomes 
(for example for a) 



n out - -\t 

fa — 2 i c 



r) clon (N, M) 



(212) 



The optimal doners are those with maximum 
r] clon {N,M) = fjcion(N,M). The derivation of the 
fidelity boundaries then relies on two facts: the shrink- 
ing factors for concatenated doners multiply and the 
optimum cloning shrinking factor for infinitely many 
copies fj c ion(N, oo) equals the shrinking factor for the op- 
timal quantum state estimation through measurements 
Vmeas{N) given N identical input states. This leads to the 
inequality r] c \ on (N, M) r? c i on (M, L) < f} c i on (N, L) and also 
(with L -> oo) r] c i on (N, M)fj c i on (M,oo) < fj c \ on (N, oo), 
which gives the lowest upper bound 



77ci on (iV,Af) < 



(N,oo) _ 

*/meas 

(AO 

(M,oo) f? mcas (M) 



(213) 



Because of the optimal shrinkin g factor r] meauS (N) = 
N/(N + 2) due to a measurement l|Massar and Popescul 
1995), wc obtain 



fj clon (N,M) 



N M + 2 
M N + 2 



(214) 
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This result for qubits yields the correct optimum N — > M 
cloning fidelity given by Eq. (|206[) for dimension d = 2, 
when inserted into 



F = Wo, 00 1 Pout I WB ,4>o) j 



clon.JV.M ' 
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for arbitrary qubit states (Preskill, 1 



l^o,0o ) = cos ^ e-^/2| ) + sm J> e +^o/2| 1} , (216) 

In fact, the resulting fidelities do not depend on the par- 
ticular values of 9q and c/)q . 

An analogous approach for the derivation of the op- 
timum coherent-state cloning fidelities is based on the 
fact that the excess noise variances in the quadratures 
due to the cloning process sum up when an N — » L 
doner is described by two cloning machines, an TV — > M 
and an M — > L, operating in sequence, X c i on (N,L) — 
Kion{N, M) + X c \ on (AI, L). With the optimum (minimal) 
excess noise variances defined by A c i on (-^V) L), we find now 
the largest lower bound 

X c i on (N, M) > X clon {N, oo) - A ckm (M, oo) . (217) 

The quantity \ c \ on (N, oo) can be in ferred from quan- 
tum estimation theory (Holevo, 198^), because it equals 
the quadrature variance of an optimal joint measure- 
ment of x and p on N identically prepared systems , 
A f ..i nn fi V,oo) = A meas (iV) = 1/2N llCerf and Iblisdiii 
2000a). For instance, the optimal simultaneous measure- 
ment of x and p on a single system N = 1 yields for each 
quadrature a variance of A moas (l) = 1/2 = 1/4 + 1/4 
((Arthurs and Kellvl Il965|) . corresponding to the intrin- 
sic minimum-uncertainty noise (one unit of vacuum) of 
the input state plus one extra unit of vacuum due to 
the simultaneous measurement. Reconstructing a coher- 
ent state based on that measurement gives the correct 
coherent-state input plus two extra units of vacuum [this 
is exactly the procedure Alice and Bob follow in classi- 
cal teleportation with an optimal average fidelity of 1/2 
for arbitrary coherent states, Eq. (|175f) ]. Since infinitely 
many copies can be made this way, the optimal measure- 
ment can be viewed as a potential 1 — * oo or, in general, 
an N — > oo doner. In fact, analogously to the qubit case 
l|Brufi et all 11998^. the optimal measurement (optimal 
state estimation) turns out to be the optimal N — > oo 
doner, and hence A c i on (TV, oo) = A mea s(-V) = 1/2JV. This 
result combined with the inequality of Eq. (|217|l gives the 
optimum (mini mal) excess noise induced by an N — > M 
cloning process l|Cerf and Iblisdirl l2000a|h 



A clon (iV,M) 
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Inserting this excess noise into Eq. I|17tj|) with g — 1 and a 
coherent-state input [where a x = a p = l/2+A c i on (iV, M)] 
leads to the correct fidelity in Eq. (|210|l . Note that this 



optimal fidelity does not depend on the particular coher- 
ent amplitude of the input states. Any ensemble of N 
identical coherent states is cloned with the same fidelity. 
The M output clones are in covariant form. This means 
the cloning machine can be considered state-independent 
with respect to the limited alphabet of arbitrary coher- 
ent states ( "it treats all coherent states equally well" ) . Of 
course, this does not hold when the doner is applied to 
arbitrary infinite-dimensional states without any restric- 
tion to the alphabet. In this sense, the optimal covariant 
coherent-state doner is nonuniversal. 

When the coherent-state alphabet is extended to 
squeezed-state inputs, optimality is provided only if the 
excess cloning noise is squeezed by the same amount 
as the input state. However, this requires knowledge 
about the input state's squeezing, making the doner 
state- dependent when applied to all Gaussian states. Yet 
Gaussian input states with fixed and known squeezing r, 
of which the coherent-state alphabet is just the special 
case r = 0, are optimally cloned in a covariant fashion. 

To summarize, for arbitrary qubits, the optimal doner 
shrinks the input state's Bloch vector by a factor 
Vcion(N, M) without changing its orientation; the output 
clones all end up in the same mixed state. For arbitrary 
coherent states, the optimal doner adds an excess noise 
A c ion(-V, M) to the input state without changing its mean 
amplitude; the coherent-state copies are all in the same 
mixed state. In both cases, this ensures covariance and 
optimality. 

What kind of transformation do we need to achieve op- 
timal coherent-state cloning? In fact, the Four-C-NOT 
transformation in Eq. I|208|l can be used to construct an 
optimal 1 — > 2 coherent-state doner, c ovariant under dis - 
placement and rotation in phase space l|Cerf et all\200dty . 
The entan gled state o f mode s 
our units) l|Cerf et all l2000|) 

\x)bc oc J dxdy exp(-x 2 - y 2 ) \x)\x + y) . (219) 

An alternative, non-entanglement based, optical circuit 
for the optimal local N — > M cloning of coherent states 
will be discussed in the next section. 



2. An optical cloning circuit for coherent states 

So far, we have only discussed the fidelity boundaries 
for the N — > M coherent-state doner. In general, find- 
ing an optimal cloning transformation and proving that 
it achieves the maximum fidelities is a fundamental issue 
in quantum information theory. In the case of coher- 
ent states, implementing an N — > M symmetric cloning 
transformation that attains Eq. (|210|l only requires a 
phase- ins ensitive linear amplifier and a series of beam 
splitters l)Braunstein et all l2001bt IFiurasekl l200l[) . 

As the simplest example, let us focus on coherent-state 
duplication (N = 1, M = 2). The coherent state to be 
cloned is given by the annihilation operator a>o, and an 
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additional ancilla mode is similarly represented by d z . 
The optimal duplication can be implemented in two steps 
via the two canonical transformations, 



a' = v2ao + o>l, 



a' = al + 



V2a z 



71 Ql = 71 



(220) 



where the mode described by a\ is another "blank" mode 
assumed to be in the vacuum state. These transforma- 
tions preserve the bosonic commutation rules for the two 
clones, modes 0" and 1". 



Ancilla 



Vacuum 



Input 



LA 



Clone 1 



BS 



Clone 2 

FIG. 6 Implementation of a 1 — * 2 continuous- variable 
cloning machine. LA stands for linear amplifier, and BS rep- 
resents a phase-free 50:50 beam splitter. 

As shown in Fig. the interpretation of these trans- 
formations is straightforward: the first step (which trans- 
forms So and d z into d and d' z ) corresponds to a phase- 
insensitive amplifier whose (power) gain G is equal to 
2, while the second step (which transforms d' and d\ 
into a'n and a") is a phase-free 50: 50 beam splitter 
llCerf and Iblisdirl l2000bl iRalphl l2000|) . As discussed by 
ICavesl l)l982l) . the ancilla z involved in linear amplifica- 
tion can always be chosen such that (d z ) — 0, so that we 
have (oq) = (a") = (do) as required. Finally, the opti- 
mally of our doner can be confirmed from known results 
on linear amplifiers. For an amplifier of (power) gain G, 
each quadrat ure's excess noise variance is bounded by 
iCavesLllQSl : 



Xla > (G-l)/4. 



(221) 



Hence, the optimal amplifier of gain G — 2 yields 
Xla = 1/4. This leads to quadrature variances of both 
clones equal to 1/2, corresponding to one extra unit of 
vacuum due to the cloning procedure. This one extra 
unit is indeed the optimal (minimal) amount according 
to Eq. for N = 1 and M = 2 . The correspond- 

ing optimal fidelity is 2/3 [Eq. I|210|) ]. Let us now turn 
from local cloning of cv quantum states to cloning at a 
distance. 



C. Telecloning 

What about conveying quantum information via a 
"multiuser quantum channel" (MQC) simultaneously to 



several receivers? The no-cloning theorem that gener- 
ally forbids perfect cloning of unknown nonorthogonal 
quantum states then also disallows cloning over a dis- 
tance. This prevents the MQC from being able to pro- 
duce exact clones of the sender's input state at all re- 
ceiving stations. The MQC, however, can provide each 
receiver with at least a part of the input quantum infor- 
mation and distribute approxima te clones with non-unit 
fidelity l)Buzek and Hillervl fl996). This cloning at a dis- 
tance or "telecloning" may be seen as the "natural gen- 
eralization of telepo rtation to the many-recipient case" 
l|Murao et al.Ul999|) . 

For qubits, telecloning has been studied t heoretically , 
first with one input sent to two receiver s llBrufi et all . 
1998aD . and more generally, wi th one inp ut ( Mur ao et all 
1999) and N identical inputs l|Dur and C irac. 2000J) dis- 



tributed among M receivers. The telecloning scenario 
with one input cop y and M receivers h as been extended 
to d- level systems ijMurao et all l2000|) . 

Clearly a telecloner needs entanglement as soon as its 
fidelity is greater than the maximum fidelity attainable 
by classical teleportation f class- In fact, for universal 



1 — > M qubit cloning we have F clon \ M 
[Eq. (HU)], whereas for 1 



> F c ] 



2/3 



states we have F„ c ,°^, s /^ > F class 



M cloning of coherent 

clon,l,M - ^ class - 1/2 [Eq. COD] (fo r 

the bounds on classical teleportation, see Sec. HV.A.2(1 . 
Therefore, optimal telecloning cannot be achieved by 
"classical telecloning", i.e., by simply measuring the in- 
put state and sending copies of the classical result to all 
receivers. On the other hand, in the limit M — > oo, both 



F 



univ,2 



<i,.i,.i..\/ — ' -fciass — 2/3 and F clon lM — > i^iass — 1/2 
which implies that no entanglement is needed for in- 
finitely many copies [this observation reflects the pre- 
viously discussed relations ?7cion(^V, oo) = fj meas (N) and 
A clon (Af,oo) = A moas (A0 with N = lj. Thus, only the 
optimal telecloning to an infinite number of receivers is 
achievable via classical telecloning. Otherwise, for a fi- 
nite number of receivers, entanglement is needed. 

The most wasteful scheme would be a protocol in which 
the sender locally creates M optimum clones and per- 
fectly teleports one clone to each re ceiver using M max- 
imall y entangled two-party states ijMurao et all Il999t 
2000). A much more economical strategy is that all 
participants share an appropriate multipartite entan- 
gled state as a quantum channel. Such states can be 
found both for discrete variables (Brufi et jjjl Il998al 
iDiir and Cirad l200fi iMurao et all Il999l l2000l) and fo r 
continuous variables ijvan Loock and Braunsteinll2001b|) . 

The recipe for building s uch an MQC for continu- 
ous va riables is as follows ijvan Loock and Braunsteinl 
l2001bl) : first, make a bipartite entangled state by com- 
bining two squeezed vacua with squeezing parameter r, 
where one is squeezed in x and the other in p, at a phase- 
free 50 : 50 beam splitter. Then keep one half (say mode 
1) and send the other half together with M — 1 vacuum 
modes through an M -splitter, Eq. (|132fl . Mode 1 is now 
given to the sending station and the M output modes 
of the M-splitter are distributed among the M receivers. 
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The symmetric 1 — ► M telecloning protocol then works 
similar to the 1 — + 1 teleportation protocol. The sender 
performs a cv Bell measurement on mode 1 and the in- 
put mode to be transferred and sends the results via 
classical channels to all the receivers. Eventually, each 
receiver can produce an optimal clone by applying the 
corresponding phase-space displacements to his mode. 
For coherent-state inputs, the optimal cloning fidelities 



F 



coh st,< 
clon,l,M 



Eq. H21(Jfl with N = 1, are attained by adjust- 



ing the squeezing parameter according to 



-2r 



'M - 1 
/ M + 1 



(222) 



Hence, the generation of the MQC requires no more than 
two |101og 10 [(%/M - 1)/(a/M + 1)]| dB squeezed states 
and M beam splitters. This is about 7.7 dB for M = 2, 
5.7 dB for M = 3, 4.8 dB for M = 4, and 4.2 dB for 
M = 5. That the squeezing and hence the entanglement 
approaches zero as M increases is consistent with the 
convergence of the optimum cloning fidelity = 
M/(2M-1) to F c i ass = 1/2. Conversely, for optimal 1 -> 
1 quantum teleportation attaining unit fidelity, infinite 
squeezing is needed. 

More generally, using the above MQC with the squeez- 
ing parameter given by Eq. I|222|l . arbitrary quantum 
states can be transferred from a sender to M receivers 
with equal minimum excess noise in each output state. 
This can enable one , for instance, to teleport entangle - 
ment to all receivers (|van Loock and Braunsteirll2001b|) . 
Further, the protocol based on the MQC forms a cloning 
circuit (an optimal one for coherent states) with no need 
to amplify the input. 

Let us finally emphasize that the cv telecloning scheme 
discussed above works without maximum bipartite en- 
tanglement (corresponding to the unphysical case of infi- 
nite squeezing), whereas the existi ng dv schemes rely on 
maximum two-party enta nglement ijDiir and Cirad . l2000t 
Mura o et al. L 119991 1200(1 . T he only known excep tion is 
the 1 -> 2 qubit telecloner of iBrufi et al\ [|l998ali which 
uses nonmaximum entanglement. 



(such operations are called quantum logic gates): by re- 
peated application of such local operations it can effect 
any unitary transformation over a finite nu mber of those 
variables to any des ired degree of precision l)DiVincenzol 
119951: lLlovdUl995aD . 10 

However, since an arbitrary unitary transformation 
over even a single continuous variable requires an infinite 
number of parameters to define, it typically cannot be ap- 
proximated by any finite number of quantum operations, 
each of which would be specified by a finite number of 
parameters. At first sight, therefore, it might seem that 
quantum computation over continuous variables would 
be an ill-defined concept. Despite this difficulty, it is 
nonetheless possible to define a notion of universal quan- 
tum computation over continuous variables for various 
subclasses of transformations, such as those that corre- 
spond to Hamiltonians that are polynomial functions of 
the operators corresponding to the continuous variables: 
A set of continuous quantum operations will be termed 
universal for a particular set of transformations if one 
can by a finite number of applications of the operations 
approach arbitrarily closely to any transformation in the 
set. 

Consider a single continuous variable corresponding to 
the dimensionless operator x, with conjugate variable p 
satisfying [x,p] = i/2. We first investigate the prob- 
lem of constructing Hamiltonians that correspond to ar- 
bitrary polynomials of £ and p. It is clearly necessary 
that one be able to apply the Hamiltonians ±£ and ±p 
themselves. In the Heisenberg picture, applying a Hamil- 
tonian H gives a time evolution for an operator A as 
A{t) = e lHt A(0)e~ lHt . Accordingly, applying the Hamil- 
tonian x for time t takes x — > x, p — > p — t, and applying 
p for time t takes x — » p: the Hamiltonians 
x and p have the effect of shifting the conjugate variable 
by a constant. 

A simple geometric construction allows one to de- 
termine what Hamiltonian transformations can be con- 
structed by the repeated application of operations from 
some set. Apply the Hamiltonian B for time St, followed 
by A, —B, —A, each for the same time. Since 



VI. QUANTUM COMPUTATION WITH CONTINUOUS 
VARIABLES 

We now consider the necessary and sufficient condi- 
tions for constructing a universal quantum computer us- 
ing continuous variables. As an example, it is shown how 
a universal quantum computer for the amplitudes of the 
electromagnetic field might be constructed using linear 
optics, squeezers and at least one further non-linear op- 
tical element such as the Kerr effect. 



iASt e -iB8t e iA8t e iBSt _ g[A,B] St 2 



+ 0(St 3 ) , (223) 



in the limit that St — > 0, the result is the same as if 
one had applied the Hamiltonian — i[A, B] for time St 2 . 
Similarly, since 

e iA6t/2 £ iB6t/2 e zB6t/2 £ iA5t/2 _ & i{A+B) St _|_ QlSt 3 ) 

(224) 

in the limit that <5t — > 0, the result is the same as if 
one had applied the Hamiltonian A + B for time St. 
In general then, if one can apply a set of Hamiltonians 



A. Universal quantum computation 



Ordinarily, a universal quantum computer applies "lo- 
cal" operations that effect only a few variables at a time 



10 This definition of quantum computation corresponds to the nor- 
mal "circuit" definition of quantum computation as in, e.g., 



iDeutschl <1989ft : lYad tl99. 
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{±Hi}, one can construct any Hamiltonian that is a lin- 
ear combination of Hamiltonians of the form ±i[Hi, Hj], 
±\Hj, \Hj,H k ]], etc . JDeutsch et ad ll995tlLlovdl 119954 
~" : I1995T 



iRamakrishna et alL 1995), and no other Hamiltonians. 
That is, one can construct the Hamiltonians in the al- 
gebra generated from the original set by commutation. 
This result makes it relatively straightforward to deter- 
mine the set of Hamiltonians that can be constructed 
from simpler operations. 

Now apply this result to the continuous variables in- 
troduced above. The application of the boost ±x and 
translation ±p for short periods of time clearly allows 
the construction of any Hamiltonian ax + bp + c that is 
linear in x and p; this is all that it allows. To construct 
more complicated Hamiltonians one must also be able to 
perform operations that are higher-order polynomials in 
x and p. Suppose now that one can apply the quadratic 
Hamiltonian 



corresponding to a \^ process in nonlinear optics. This 
higher-order Hamiltonian has the key feature that com- 
muting it with a polynomial in x and p typically increases 
its order. By evaluating a few commutators, e.g., 

[H 2 ,x] = —2i(x 2 p + p ) + lower-order terms 

[H 2 ,p] = 2i(xp 2 + x 3 ) + lower-order terms 

[x, [H 2 ,S]] = — 8p 3 + lower-order terms 

[p, [H 2 ,S]} = 8x 3 + lower-order terms , (231) 

one sees that the algebra generated by x, p, H, S and 
H 2 by commutation includes all third order polynomials 
in x and p. A simple inductive proof now shows that one 
can construct Hamiltonians that are arbitrary Hermitian 
polynomials in any order of x and p. Suppose that one 
can construct a polynomial of order M consisting of any 
specific term 



H — x 2 +p 2 



Application of this Hamiltonian for time t takes 



x — > cos t x — sin t p 
p — > cos £ p + sin i i 



(225) 



(226) 



For an electromagnetic field, such an operation corre- 
sponds to a simple phase shift. Note that since e lHt is 
periodic with period 1/47T, one can effectively apply —H 
for a time St by applying H for a time An — St. The 
simple commutation relations between H, x and p imply 
that the addition of ±H to the set of operations that can 
be applied allows the construction of Hamiltonians of the 
form aH + bx + cp + d. 

Suppose that in addition to translations and phase 
shifts one can apply the quadratic Hamiltonian ±S with 



S = xp + px 
Applying Hamiltonian S takes 



x 
P 



e'i 
e"*p 



(227) 



(228) 



Colloquially, S "stretches" x and "squeezes" p by some 
amount. In the case of the electromagnetic field, S cor- 
responds to a squeezer operating in the parametric ap- 
proximation. It is easily verified that 



[H, S] = 2i(x 2 



P 



(229) 



Looking at the algebra generated from x, p, H and S 
by commutation, one sees that translations, phase shifts, 
and squeezers allow the construction of any Hamiltonian 
that is quadratic in x and p, and of no Hamiltonian of 
higher order. 

To construct higher-order Hamiltonians, nonlinear op- 
erations are required. One such operation is the "Kerr" 
Hamiltonian 



H 2 



2\2 



(230) 



c M -"p" 



n< M 



(232) 



Since we may already create any quadratic Hermitian 
Hamiltonian and since 



[x 2 ,x M - n p n ] 



\p 2 ,x M ~ n p n ] 



-1) 



-lower-order terms 

-(M - n)i M -(n+l) -(n+l) 

2 P 



-lower-order terms 



(233) 



then it is easy to see that we may create all polynomials 
of order M. Further, since we may create the Hamilto- 
nians x 3 or p 3 and since 



[x 3 ,x n p m ] 



-3ni 



£™- 1 p™+ 2 



lower-order terms 
4- lower-order terms 



(234) 



one can by judicious commutation of x 3 and p 3 with 
monomials of order M construct any monomial of order 
AI + 1. Since any polynomial of order M + 1 can be con- 
structed from monomials of order M+l and lower, by ap- 
plying linear operations and a single nonlinear operation 
a finite number of times one can construct polynomials 
of arbitrary order in x and p to any desired degree of ac- 
curac y. Comparis on with similar results for the discrete 
case l|Llovdl Il996fl shows that the number of operations 
required grows as a small polynomial in the order of the 
polynomial to be created, the accuracy to which that 
polynomial is to be enacted, and the time over which it 
is to be applied. 

The use of the Kerr Hamiltonian H 2 was not essen- 
tial: any higher order Hamiltonian would be satisfactory. 
Note that commutation of a polynomial in x and p with x 
and p themselves (which have order one) always reduces 
the order of the polynomial by at least one, commutation 
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with H and S (which have order two) never increases 
the order, and commutation with a polynomial of order 
three or higher typically increases the order by at least 
one. Judicious commutation of £, p, H and S with an 
applied Hamiltonian of order three or higher therefore 
allows the construction of arbitrary Hermitian polyno- 
mials of any order in £ and p. Alternatively it has re- 
cently been proposed that a measurement-induced non- 
linearity (using ideal photodetection) could be used in 
an optical scheme without the need for nonlinear materi - 
als l)Bartlett and Sandersll2003lGottesman et a/.l .l200Tl. 
The physical realization of such nonlincarities is an im- 
portant quest for quantum information theory over con- 
tinuous variables. 

The above set of results shows that simple linear oper- 
ations, together with a single nonlinear operation, allow 
one to construct arbitrary polynomial Hamiltonian trans- 
formations of a single quantum variable. Let us now turn 
to more than one variable, e.g., the case of an interfer- 
ometer in which many modes of the electromagnetic field 
interact. Suppose now that there are many variables, 
{xi,Pi}, on each of which the simple single- variable op- 
erations described above can be performed. Now let the 
variables interact with each other. For simplicity, we as- 
sume that we can apply interaction Hamiltonians i-B^ 
with Bij = (piXj — Xipj): a more complicated interaction 
Hamiltonian can always be used to generate interactions 
of this form by combining it with single-variable opera- 
tions. This operation has the effect of taking 

Ai — > cos t Ai + sin t Aj 

Aj — > cost Aj - sin* Ai , (235) 

where Ai — {£i,pi} and Aj = {xj,pj}- For the electro- 
magnetic field, Bjj functions as a beam splitter, linearly 
mixing together the two modes i and j. By repeatedly 
taking commutators of Bij with polynomials in i, and 
Pi, for different i, it can be easily seen by the same alge- 
braic arguments as above that it is possible to build up 
arbitrary Hermitian polynomials in {xi,pi}. 

This concludes the derivation of the main result: sim- 
ple linear operations on continuous variables, together 
with any nonlinear operation and any interaction be- 
tween variables suffice to enact to an arbitrary degree of 
accuracy Hamiltonian operators that are arbitrary Her- 
mitian polynomials of the set of continuous variables. In 
the case of modes of the electromagnetic field, linear op- 
erations such as translations, phase shifts, squeezers, and 
beam splitters, combined with some nonlinear operation 
such as a Kerr nonlinearity, allow one to perform arbi- 
trary polynomial transformations on those modes. Note 
that in contrast to the case of qubits, in which a nonlinear 
coupling between qubits is required to perform universal 
quantum computation, in the continuous case only sin- 
gle variable nonlincarities are required, along with linear 
couplings between the variables. 

In analogy with information over classical continuous 
variables, which is measured in units of "nats" (1 nat = 



log 2 e bits), the unit of continuous quantum information 
will be called the "qunat." Two continuous variables in 
the pure state |V>)i2 possess — Trpilnpi qunats of en- 
tanglement, where p\ — Tr^lV') 12(^1- F° r two squeezed 
vacua (squeezed by an amount e~ r ) entangled using a 
beam splitter the entropy so computed from the approx- 
imate EPR state is given by 

S(p) = (1 + n) ln(l + n) — ft Inn qunats (236) 

with n = e r sinhr. For example, e 2r = 10 gives 10 dB 
of squeezing in power, corresponding to r = 1.151. By 
Eq. I|236|) . two continuous variables entangled using a 10 
dB squeezer then possess 2.607 qunats of shared, contin- 
uous quantum information, equivalent to 3.762 qubits of 
discrete quantum information. This is comparable to the 
degree of entanglement currently available using ion-trap 
quantum computers. 

Quantum computation over cv can be thought of as the 
systematic creation and manipulation of qunats. Univer- 
sal quantum computation for polynomial transformations 
of continuous variables effectively allows one to perform 
quantum floating point manipulations on those variables. 
For example, it is clearly possible using linear operations 
alone to take the inputs x±, £2 and to map them to £\, 
ax\ + bii + c. Similarly, application of the three- variable 
Hamiltonian 2x±X2P3 takes 

X\ — > X\ 

x 2 — > x 2 (237) 
£3 — >• %3 + XxX^t , 

that is, this operation allows one to multiply x\ and £2 
and place the result in the "register" £3. A wide variety 
of quantum floating point operations are possible. 

The ability to create and manipulate qunats depends 
crucially on the strength of squeezing and of the nonlin- 
earities that one can apply. Ten dB squeezers (6 dB after 
att enuation in the m easurement apparatus) currently ex- 
ist l)Wu et a/.l . ll986[) . High-Q cavity quantum electrody- 
namics can supply a strong Kerr effect in a relatively 
lossless context, and quantum logic gates constructed 
for qubits could be used to provide the nonlinearity for 
conti nuous quantum variables as well ijTurchette et al\ . 
1995). Here the fact that only single-mode nonlinearities 
are required for universal quantum computation simpli- 
fies the problem of effecting continuous quantum logic. 
Nonetheless, the difficulty of performing repeated nonlin- 
ear operations in a coherent and loss- free manner is likely 
to limit the possibilities for quantum computation over 
the amplitudes of the electromagnetic field. Vibrational 
modes of ions in traps or excitations of a Bose-Einstein 
condensate might provide the long-lived, lossless states 
required for quantum computation over continuous vari- 
ables. 
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B. Extension of the Gottesman-Knill theorem 

Quantum mechanics allows for information process- 
ing that could not be performed classically. In partic- 
ular, it may be possible to perform an algorithm ef- 
ficiently on a quantum computer that cannot be per- 
formed efficient ly on a clas s ical o ne. The Gottesman- 
Knill theorem ijGottesmanl Il999|) for discrete-variable 
(qubit) quantum information provides a valuable tool 
for assessing the classical complexity of a given pro- 
cess. Essentially, it states that any quantum algorithm 
that starts in the computational basis and employs only 
a restricted class of gates (Hadamard, phase, C-NOT, 
and Pauli gates), along with projective measurements in 
the computational ba sis, can be efficiently simula ted on 
a classical computer l)Nielsen and ChuaneL |2000). The 
Gottesman-Knill theorem reveals that a large class of 
quantum algorithms do not provide a speedup over clas- 
sical processes. 

Here we develop the continuous-variable extension to 
the Gottesman-Knill theorem. This result helps us un- 
derstand what algorithms performed by a cv quantum 
computer may be efficiently simulated by a conventional 
classical computer. By contrast, it is exactly the algo- 
rithms for which such an efficient simulation is impossi- 
ble which is the major subject of attention of quantum 
computation. 

We note that the issue of efficient classical simulation 
of a cv process is more involved than for the discrete 
case. Continuous-variable quantum states will typically 
only be defined for some limited precision. For exam- 
ple, the states used in cv experiments are approximations 
to the idealized computational basis. These basis states 
are infinitely squeezed states whereas any experimental 
implementation will involve only finitely squeezed states 
ijLlovd and BraunsteinL Il999f) . Furthermore, measure- 
ments are part of the quantum computation and, even 
in the computational basis, are subject to experimental 
constraints (such as detection efficiency). A good classi- 
cal simulation must be robust against such imperfections. 

Despite these complications, we shall present a set of 
sufficient conditions for a cv quantum information pro- 
cess to ensure that it can be efficiently simulated classi- 
cally. To p rove this theorem, we employ the techniques of 
stabilizers l|Nielsen and Chuand . l200fj|) that are used for 
qubits. Using this formalism, it is possible to simulate 
a quantum algorithm by following the evolution of the 
set of stabilizers, rather than the evolution of quantum 
states. For a non-trivial set of algorithms this procedure 
requires only a short description at each step and so may 
be simulated efficiently without recourse to the exponen- 
tial overhead of explicitly recording all the terms of a 
quantum superposition (which even for a single continu- 
ous variable could require an infinite number of terms). 
For cv processes the stabilizer formalism is particularly 
simple when expressed in terms of their generators. 

We first must identify the cv analogue to the qubit 
computational basis. Here we take it to be the 



set of position eigen s tates \x) (|Braunsteinl Il998albl : 
iLlovd and Braunsteinl Il999f) . Next, given this choice 
we must identify the cv analogues to each of the oper- 
ations which are considered in the qubit-version of the 
Gottesman-Knill theorem. For qubits the so-called Pauli 
gates perform bit flips, phase flips or a combination of 
the two. For cv states, the natural analogue would be to 
perform position translations, momentum kicks or combi- 
nations thereof. Thus, for a single cv, the Pauli operator 
analogs are 

X{x) = e~ 2lxp , Z(p) = e 2lpx , (238) 

for x, p both real. These operators are non-commutative 
obeying 

X(x)Z(p) = e- 2lxp Z(p)X(x) . (239) 

On the computational basis these operators act as 

X{x')\x) = \x + x') , Zip)\x) = e 2lpx \x) . (240) 

We define the SUM gate as the cv analogue of the C- 
NOT gate. It provides the basic interaction gate for a 
pair of cv systems i and j via 



SUMy = e" 2 " 1 



Referring to Eq. 
operators is given by 



(241) 

the action of this gate on the Pauli 



SUMy : Xi(x)®lj -» Xi{x) <g> Xj(x) 

Z^p)®^ -> Zi{p)®i 3 

li®Xj(x) -> ii®Xj(x) 

ti^Zjip) -» Zi{p)- 1 ® Zj(p) . (242) 

This gate describes the unitary transformation used in a 
back-action evading or quantum nondcmolition process. 

The Fourier transform jF is the cv analogue of the 
Hadamard transformation [Eq. (|131fl ]. It can also be de- 
fined as 



and its action on the Pauli operators is 
T 



X(x) 
Z(P) 



Z(x) 

xip)- 1 



(243) 



(244) 



The "phase gate" P(ri) is a squeezing operation for cv, 
defined by 

P(r,) = e 1 ^ 2 , (245) 
and its action on the Pauli operators is given by 



P(V) ■ X(x) 
Zip) 



X(x)Z(r)x) 



Z{P) 



(246) 
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which is analogous to that of th e discrete-variable phase 
gate P l|Gottesman et adl200i|) . 

For the cv operators defined above, SUM, f, P(n), 
X(x) and Z(p) are sufficient to simulate all possible 
quadratic Hermitian Hamiltonians, as we saw in the last 
section. 

We now have the necessary components to prove our 
main result. We employ the stabilizer formalism used 
for discrete variables and follow the evolution of gen- 
erators of these stabilizers rather than the states. To 
start with, let us consider the ideal case of a system with 
an initial state in the computational basis of the form 
\x\, X2, ■ ■ ■ , x n ). This state may be fully characterized 
by the eigenvalues of the generators of n Pauli operators 
{xi, £2, ■ ■ ■ , in}. Any cv process or algorithm can then 
be modeled by following the evolution of the generators 
of these n Pauli operators, rather than by following the 
evolution of the states in the infinite-dimensional Hilbert 
space £ 2 (R"). If we restrict ourselves to the gate opera- 
tions SUM, jF, P(v)i X(x) and Z(p) our job is straight- 
forward, since each of the stabilizers evolves only to a 
simple tensor product of Pauli operators. In other words, 
these operations map linear combinations of Pauli oper- 
ator generators to linear combinations of Pauli operator 
generators (each Xi and pi is mapped to sums of Xj, Pj, 
j = 1, . . . , n in the Heisenberg picture). For each of the 
n generators describing the initial state, one must keep 
track of In real coefficients describing this linear combi- 
nation. To simulate such a system, then, requires follow- 
ing the evolution of 2n 2 real numbers. 

In the simplest case, measurements (in the computa- 
tional basis) are performed at the end of the computa- 
tion. An efficient classical simulation involves simulat- 
ing the statistics of linear combinations of Pauli operator 
generators. In terms of the Heisenberg evolution, the Xj 
are described by their initial eigenvalues, and the pj in 
the sum by a uniform random number. This prescription 
reproduces the statistics of all multi-mode correlations 
for measurements of these operators. 

Measurement in the computational basis plus feed- 
forward during the computation may also be easily simu- 
lated for a sufficiently restricted class of feed-forward op- 
erations; in particular, operations corresponding to feed- 
forward displacement (not rotation or squeezing, though 
this restriction will be dropped below) by an amount pro- 
portional to the measurement result. Such feed- forward 
operations may be simulated by the Hamiltonian that 
generates the SUM gate with measurement in the com- 
putational basis delayed until the end of the computation. 
In other words, feed-forward from measurement can be 
treated by employing c onditional unitary operation s with 
delayed measurement llNielsen and Chuand . I2OOCO. thus 
reducing feed-forward to the case already treated. 

In practice, infinitely-squeezed input states are not 
available. Instead, the initial states will be of the form 

Si(n) ® 5 2 (r 2 ) <g> • • • ® S„(r n )|0,0, . . . ,0) , (247) 
where here |0) is a vacuum state and S(r), with r € R, is 



the squeezing operation. Now the vacuum states may 
also be described by stabilizers 'generated' by {ii + 
ifti, X2+ip2, ■ ■ ■ i Xn+iPn} which are now complex linear 
combinations of the earlier generators. Although these 
'generators' are non-Hcrmitian, the operators obtained 
by their exponentiation do indeed behave as stabilizers. 
Combining the initial squeezing operators into the com- 
putation, a classical simulation of a gate array consisting 
of operations from the set SUM, JF, P(r]), X(x) and Z(p) 
requires following the evolution of An 2 numbers (twice 
that of infinitely squeezed inputs due to the real and 
imaginary parts). Measurements in the computational 
basis are again easily simulated in terms of this Heisen- 
berg evolution, by treating each of the Xi and pi as ran- 
dom numbers independently sampled from a Gaussian 
distribution with widths described by the vacuum state. 
Simulation of measurement plus feed-forward follows ex- 
actly the same prescription as before. 

Furthermore, the condition for ideal measurements can 
be relaxed. Finite-efficie ncy detection can be mod eled by 
a linear-loss mechanism l|Yuen and ShapiroUl980|) . Such 
a mechanism may be described by quadratic Hamiltoni- 
ans and hence simulated by quadratic Hamiltonians and 
hence the allowed gate elements. Note that these allowed 
gate elements are precisely those that preserve Gaussian 
states; i.e., they transform Gaussians to Gaussians; this 
observation allows us to remove our earlier restriction on 
feed-forward gates and allow for classical feed-forward 
of any allowed gate operation. Note that non-Gaussian 
components to the states cannot be modeled in this man- 
ner. 

Finally, it should be noted that modeling the evolution 
requires operations on real- valued (continuous) variables, 
and thus must be discretized when the simulation is done 
on a discrete (as opposed to analog) classical computer. 
The discretization assumes a finite error, which will be 
bounded by the smaller of the initial squeezing or the 
final "resolution" due to detector efficiency, and this er- 
ror must remain bounded throughout the simulation. As 
only the operations of addition and multiplication are 
required, the discretization error can be kept bounded 
with a polynomial cost to efficiency. This completes our 
demonstration of the extension of the Gottesman-Knill 
theorem to continuous variables. 

As with the discrete- variable case, these conditions do 
not mean that entanglement between the n oscillator sys- 
tems is not allowed; for example, starting with (separa- 
ble) position eigenstates, the Fourier-transform gate com- 
bined with the SUM gate leads to entanglement. Thus, 
algorithms that produce entanglement between systems 
may still satisfy the conditions of the theorem and thus 
may be simulated efficiently on a classical computer; 
included are those used for cy quantum teleportatio n 
ijBraunstein and Kimbld. Il998al iFurusawa et all. fl998l). 
quantum cryptography llGottesman and Pres kill. 2001; 
iHillervl 120001: iRalphl l2000al lReidL |2000(K and error cor- 
rection l|Braunsteinl ll998albT ). Although these processes 
are of a fundamentally quantum nature and involve en- 
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tanglement between systems, the extended Gottesman- 
Knill theorem demonstrates that they do not provide any 
speedup over a classical simulation. This theorem, there- 
fore, provides a valuable tool in assessing the classical 
complexity of simulating these quantum processes. 

As shown in the previous section, in order to generate 
all unitary transformations given by an arbitrary polyno- 
mial Hermitian Hamiltonian (as is necessary to perform 
universal cv quantum computation), one must include a 
gate described by a Hamiltonian other than an inhomo- 
geneous quadratic in the canonical operators, such as a 
cubic or higher-order polynomial. Transformations gen- 
erated by these Hamiltonians do not preserve the linear 
structure of the generators of the stabilizers, and thus 
cannot be described efficiently by the stabilizer formal- 
ism. These nonlinear transformations can be used in cv 
algorithms and may provide a significant speedup over 
any classical process. 



VII. EXPERIMENTS WITH CONTINUOUS QUANTUM 
VARIABLES 

In this section, we discuss some experiments based on 
continuous quantum variables. These include the gen- 
eration of squeezed-state EPR entanglement via optical 
parametric amplification and via the Kerr effect. Qual- 
itatively different manifestations of cv entanglement are 
that between two atomic ensembles, creat e d in a n ex- 
periment in Copenhagen l)Julseaard et all l200lt) . and 
that between more than two optical modes, experimen- 
tally generated an d verified in Tokyo for three modes 
ijAoki et all 12003]) . Quantum teleportation of coherent 
states has been achieved a l ready in Pasadena at Cal- 
tech llFurusaw a et al\ |1998|: |Z hang et all |2003|) and in 
Canberra l|BoweriTr all I2003H) . ' We will briefly show 
how to describe these experiments in a realistic broad- 
band fashion. Further important cv experiments include 
the dense co ding experiment of Li et al. utilizing bright 
EPR beams l)Li et "aD. l2002bft . the coherent-state based 
quantum key distribution experim ent by Grangier and 
his group ijGrosshans et all l2003j) . and the demonstra- 
tion of a quantum memory effect by the Polzik group 
llSchori et all 12002ft . 



A. Generation of squeezed-state EPR entanglement 

The generation of dv qubit entanglement can be 
achieved experimentally via weak down-conversion pro- 
ducing polarization-entangled single photons. The result- 
ing maximum entangle ment is then 'polluted' by a larg e 
vacuum contribution ijBraunstein and KimbleL ^998b). 
The consequence of this is that the entanglement never 
emerges from these optical devices in an event-ready fash- 
ion. Since successful (post-selected) events occur very 
rarely, one has to cope with very low efficiency in these 
single-photon schemes. However, there are also some ad- 
vantages of the single-photon based approaches to entan- 



glement generation and quantum communication, as we 
discussed in SeaQ] Great progress has been made in gen- 
crating sing le-photon entanglement, b oth for the case of 
two qubits llBouw meeste r et all Il997|) and three qubits 
l|Bouwmeester et aZl Il999|) " 

In the cv setting, the generation of entanglement, for 
instance, occurring every inverse bandwidth time at the 
output of an optical parametric amplifier is more effi- 
cient than in the single- photon schemes. When mak- 
ing an entangled two-mode squeezed state, the vacuum 
contribution that originates from the down-conversion 
source need not be excluded via post-selection. It is 
still contained in the resulting nonmaximally entangled 
output state, as expressed by Eq. (|85|l in an ideal- 
ized discrete-mode description. We will now discuss 
a more realistic description of the resulting broadband 
entangled state that emerges from an optical paramet- 
ric amplifier. This type of quadrature entanglement 
was used i n the recent cv quantum communicat i on ex- 
perimen t s llBow en et all I20q3bt iFurusawa et all Il998t 
iLi et all 12002 pi IZhang et all l2003|) . The first experi- 
ment to produce cv broadban d EPR correlations of this 
kind was performed in 1992 ijOu et all ll992albTl . Re- 
cently, this "conventional" quadrature entanglement was 
also transformed into cv polarization entanglement cx- 
hibiting correlations in the Stokes operators of two beams 
l|Bowen et all 12002). Another recent scheme to create cv 
broadband entanglement was based on a different non- 
linear optical interaction, namely th e Kerr effect in an 
optical fiber ijSilberhorn et adl200l|) . 



1. Broadband entanglement via optical parametric 
amplification 

A broadband entangled state is generated either di- 
rectly by nondegenerate parametric amplification in a 
cavity (NOPA, also called "nondegenerate parametric 
down conversion") or by combining at a beam splitter 
two independently squeezed fields produced via degener- 
ate down conversion. This observation is the broadband 
extension of the fact that a two-mode squeezed state is 
equivalent to two single-mode squeezed states combined 
at a 50 : 50 beam splitter. Just as for the two discrete 
modes in Eqs. (|58|) and (|S9"|) . thi s can be easily seen in 
the " continuum" representation l) Caves and Schumakerl 
1985) of the quadrature operators, 



1 r 
2 



1 + — b(uj + fl) 



1 ^(ujQ-n) 



1 + — b(u + fi) - 

UJQ 



1- — P(cj -Q) 

UJQ 



(248) 
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where luq is the optical central frequency and f2 > 
some small modulation frequency. Here, the annihilation 
and creation operators (now no longer dimensionless, but 
each in units of root time, y/s) satisfy the commutation 
relation [b(ui), b'(u')] = 5(u — a/). The commutat ors for 
the quadratures are l) Caves and Schumakerl ^985) 

[x(n),x(Q')] = [x(n),p(n')] = im),m')} = o, 

ZU)Q 

[x (o),#(n')] = [x\n),p(n')} = ^s(n - n'). 

(249) 

This is a suitable formalism for analyzing two-photon de- 
vices such as the parametric amplifier. Due to the nonlin- 
ear optical interaction, a pump photon at frequency 2wo 
can be annihilated to create two photons at the frequen- 
cies wo±0 and, conversely, two photons can be annihi- 
lated to create a pump photon. Thus, the light produced 
by the amplifier always consists of pairs of modes at fre- 
quencies loq ± £1. 

Now it is convenient to define the upper-case operators 
in the rotating frame about the optical central frequency 
u>o (for the NOPA, half the pump frequency), 

B(t) = b(t)e tuJot . 
Via the Fourier transform 

B(Q) = -L= / dtB(t)e mt , (251) 



'2-k 

the fields may then be described as functions of the mod- 
ulation frequency Q with the commutation relation 



(250) 



(252) 



In the rotating frame, using b(uio ± fi) = B(±il) and the 
approximation Q <C loq, the frequency resolved "broad- 
band" quadrature amplitudes of Eq. I|248|) for a mode 
k (for instance, a spatial or a polarization mode) may 
be written in a form more reminiscent of th e "discrete" 
quadratures in Eq. (jTT)) as l)Ou et all Il992a|) 



1 



x fc (n) = -[B k (n) + Bl(-n)}, 



P k (n) = -[ Bk (Q) - Bl(-il)}, 



(253) 



with the broadband annihilation operators B k (Q). The 
only nontrivial commutation relations for the non- 
Hermitian quadratures are now 

[x(n), pt(n')] = [xHci), p(fi')] = l -s(n - n'). 

(254) 

The actually measurable quantities are the Hermitian 
real and imaginary parts of these quadratures, satisfy- 
ing the usual commutation relations 



[ReX(fi),ReP(f2')] = [Imi"(f2),ImP(Q')] 



Using the quadrature squeezing spectra, 

(Axli^AXiin')) = (AP|(n)Ap2(0')) 

= s(n-n')\s+(n)\ 2 /4, 

(AXl{Q)AX 2 (n')) = (API(Q)AP 1 (Q')) 

= J(fi-ft') 1 5_ («)| 2 /4, 

(256) 

two independently squeezed fields coming from two de- 
generate optical parametric oscillators (OPO's) can be 
described as 



Xi(fi) = s+(n)x{ \n), Pi(n) = S-(n)p^'(n), 

X 2 {Q) = S-(Q)xP(Sl), P 2 (fi) = s + (f>)p 2 (0) (f>), 

(257) 

where |<S'_ (0)| < 1 refers to the quiet quadratures and 
| S+ > 1 to the noisy ones, and the superscript '(0)' 
denotes vacuum modes. These fields can be used as a 
broadband E PR source when they a re combined at a 
beam splitter l(van Loock et all l2000l) . 

x[(n) = -^s+ityx^ity + ^s-ityx^in), 



(0), 



V2 



V2 



P[{n) = ^^_(r!)p 1 (0) (r!) + ^5 + (r!)p 2 (0) (r!), 



V2 



V2 



x' 2 (n) = ^s + (n)x[ 0) (^)-^S-(Q)xi°\si), 
p 2 '(n) = -^S-(n)P^\n) - ^s+(n)P^ 0) {n). 



V2 



V2 



(258) 



In this state, the upper and lower sidebands around the 
central frequency exhibit EPR-type correlations similar 
to those in Eq. (JHOJ, 

u(n) = x[(n) - x 2 (n) = V2S-(n)x^\n) , 

V(Sl) = P{(0) +Pa(0) = v / 2S'_(n)P 1 (0) (n) , (259) 
and therefore 

(Atf{n)Au(n')) = 5(n-n , )\S-{n)\ 2 /2, 
(Av\n)Av(n')) = s(n-n')\S-(n)\ 2 /2. (260) 

The corresponding sum condition Eq. (|110|l with a = 1, 
necessarily satisfied by any separable state, is now vio- 
lated for that range of modulation frequencies for which 
the resources are squeezed, 11 



(Av^(n)Av(n')) 
= s(n - n')\S-(si)\' 



(261) 



(255) 



There is actually no rigorous broadband derivation of the insep- 
arability criteria in the literature, including the corresponding 
broadband analogue to the sum condition Eq. I11UI . Here we 
also only give the "continuum" equations for the broadband EPR 
state and apply it directly to the discrete sum condition at the 
squeezing frequencies. 



55 



In recent experiments, such violations at some squeez- 
ing frequency were detect ed for the verification of cv 
quadrature entangleme nt ((Furusawa and Kimblel . l2003t 
ISilberhorn et al\. l200ll) or, s imilar ly, of cv polarization 
entanglement IjBowen et all l2002|) . Exactly these vio- 
lations were also needed for acco mplishing the recent 
quantum comm u nication protoco ls llBowen e£ a/ll2 003b: 
i Furusawa et all 1 19981: ILi et all l2002bl IZhang et al. . 
120031) . 

If the squeezed fields for entanglement generation come 
from two OPO's, the nonlinear optical interaction is due 
to a x*- 2 ) medium. In general, Eq. I|25t)|) may define arbi- 
trary squeezing spectra of two statistically identical but 
independent broadband squeezed states. Before obtain- 
ing the "broadband EPR state" , the squeezing of the two 
initial fields may be generated by any suitable nonlinear 
interaction. The optical Kerr effect, based on a x in- 
teraction may also serve as such a suitable interaction. 



2. Kerr effect and linear interference 

Th e first light-squeezin g experiment was published in 
1985 l)Slusher et all H985|) . In this experiment, squeezed 
light was generated via four-wave mixing. Though in- 
volving the production of photon pairs as in paramet- 
ric down-conversion, the process of four-wave mixing is 
based on a x^ 3 "* interaction. 

Initially, the main conceptual difficulty in creating a 
detectable squeezing effect via a v/ 3 ' interaction was that 
such a process is very weak in all transparent media. In 
particular, in order to achieve measurable quantum noise 
reduction against additional classical (thermal) noise, 
large light energy density and long interaction lengths 
are required. These requirements led to the proposal to 
use an optical fiber for nondegenerate four-wave mixing 
l)Levenson et all Il985|) . The proposal referred to a dis- 
persionless cw type of four-wave mixing. In the response 
of the fiber material to an external field, the dominant 
nonlinear contribution corresponds to a x^ interaction 
("Kerr effect") , because the y ^ 2 - 1 susceptibility vanishes 
in a glass fiber <jAgrawa]lll995[) . The Kerr effect is equiva- 
lent to an intensity dependent refractive index. A squeez- 
ing experiment confirming t he cw theory of four- wave 
mixing in a single- mode fi ber llLe venson et alJ. ll985|) was 
successfully conducted bv IShelbv*^7TzZntT98a) . Soon af- 
ter this experiment, the quantum theory of light propa- 
gation and squeezing in an optical fiber was extended to 
include pulsed pump fields and group- velocity dispersion 
i|Carter et adll987|) . 

By using stochastic equations for describing the classi- 
cal propagation plus the evolution of the quantum noise 
in the fiber, Carter et al. proposed the squeezing of quan- 
tum fiber-solitons l|Carter et adll987l). This theory was 
then e xperimentally confirmed bv lRosenbluh and Shelbvl 
II1991D . 

What is the potential advantage of using optical fibers 
and light pulses with respect to applications in quan- 



tum communication? At the communication wavelength 
of 1.55 /mi, glass fibers have an absorption minimum 
with very low losses and negative dispe rsion which en- 
ables one to use stable soliton pulses llAgrawal Il995l 
iDrummond et al\ . Il993|) . A fiber-based quantum com- 
munication system can be potentially integrated into ex- 
isting fiber-optics communication networks. Moreover, 
an optical fiber naturally offers long interaction times for 
producing squeezed light. Short light pulses and solitons 
have large peak power and photon number density which 
enhances the effective x^ nonlinearity in the fiber and 
hence the potential squeezing. 

The Kerr interaction Hamiltonian, 

H int = hn a} 2 a 2 = tiKn(h - 1) , (262) 

with k proportional to x^ 3 \ is quartic rather than 
quadratic [see Eq. H52|) ] as for optical parametric am- 
plification or for conventional four-wave mixing. For 
the quartic Hamiltonian, the Kerr interaction would 
turn a coherent state into a "banana-shaped" state 
which after a suitable phase-space displacement has re- 
duced number and increased phase uncertainty though 
essent ially still a number-phase min imum uncertainty 
state ijKitagawa and Yamamotol Il986f) . This state cor- 
responds to a photon number squeezed state with sub- 
Poissonian statistics, as opposed to the ordinary quadra- 
ture squeezed state. It is closer to a Fock state than 
to a quadrature eigenstate. However, in the regime of 
large photon number and small nonlinearity [which for 
example applies to qua ntum solitons for sufficient ly small 
propagation distance ijKartner and Boivinl Il996j) ] quan- 
tum fluctuations higher than those of second order can be 
neglected. The quartic Hamiltonian is then effectively re- 
duced to a quadratic one (note that squeezing due to the 
former preserves the photon number, whereas that due to 
the latter does not). In fact, the fiber Kerr nonlinearity 
is so small that the radius of curvature of the "banana" 
is far larger than its length. The difference between such 
a state and an ordinary squeezed state with an "elliptic" 
phase-space distribution is therefore negligible. 

Recently, bipartite cv entanglement was created 
through an optical fiber wi th optical pulses s queez ed via 
the Kerr x (3) nonlinearity l)Silberhorn et all 1200 3) . The 
entanglement-generating mechanism in this experiment 
was indeed similar to the creation of the broadband EPR 
state in Eq. I|258|) by combining the two squeezed fields 
in Eq. I|257|) : first, the Kerr nonlinearity in the fiber was 
exploited to produce two independent squeezed beams 
(more precisely, an asymmetric fiber Sagnac interferom- 
eter was used to make two amplitude or photon num- 
ber squeezed beams of orthogonal polarization). The 
squeezed fields were then combined outside the fiber at 
a beam splitter. As described, in order to obtain Kerr- 
induced squeezing, the beams must have non-zero inten- 
sity, they must be bright, as opposed to the squeezed 
vacuum states in Eq. I|257|l . 
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B. Generation of long-lived atomic entanglement 

In Sec. IIIII in particular Sec. lIII.B.4l we discussed how 
to make entanglement from sources of nonclassical light 
such as squeezed states using a network of beam split- 
ters. In fact, in order to create cv entanglement us- 
ing linear optics, at least one of the input modes must 
be in a nonclassical state. Otherwise, if all the input 
modes are in a vacuum or coherent state, the output state 
that emerges from the beam splitters will always remain 
separable. Similarly, entanglement-based quantum com- 
munication schemes utilizing atom-light interactions also 
seem to rely upon nonclassical ligh t as a resou r ce [se e, 
for instance, the protocol of lKuzmich and Polz ik (2000)]. 
Moreover, other atom-light protocols require the atoms 
be tr apped in high-Q op t ical c avities [for example, in 
Ref. IjParkins and Kimbld . 119991) ]. However, remarkably, 
entanglement between free-space atomic ensembles may 
also be c reated using only co herent light, as it was pro- 
posed bv lDuan et all l)2000a|) . The QND coupling given 
in Eq. (|205[1 is a suitable interaction to achieve this. After 
the successive transmission of a light beam through two 
separate atomic ensembles, the light is detected such that 
the atomic states are reduced to an entangl ed state, cor- 
respon ding to a nonlocal Bell measurement ijDuan et all . 
l2000a|) . Such an experiment , along the lines of the pro- 
posal o flDuan e.t all ll2000ar> was performed in Copen- 
hagen Uuls gaard et all 1200 lj) . The long-lived entan- 
glement generated in this experiment was between two 
clouds of atoms, each consisting of a caesium gas contain- 
ing about 10 12 atoms. The creation of this entanglement 
between material objects is an important step towards 
storing quantum information in an (optical) communica- 
tion protocol and proves the feasibility for the implemen- 
tation of light-atom quantum interfaces using a similar 
approach. Further experimental investigations towards a 
quantum memory, also based on this kind of approach, 
will be briefly described in Sec. IVII.GI 

The experiment for creating atomic entanglement 
ijJulseaard et all 1200 if) is based on the polarization and 
spin representation for cv quantum information, as dis- 
cussed in Sec. Ill.FI Hence, the light and the atoms are 
described via the Stokes operators and the operators for 
the collective spin, respectively. More precisely, if the 
atomic samples are spin-polarized along the x-axis with 
a large classical value, and similarly for the light, the only 
quantum variables used for the entanglement generation 
are the atomic operators F y and F z and the light opera- 
tors S y and S z . In other words, the y and z components 
of spin and polarization play the roles of the effective 
phase-space variables both for the atomic and the light 
system, respectively. 

Now when an off-resonant light pulse classically po- 
larized along the cc-axis (S x ~ (S x ) = S) is transmit- 
ted along the z-axis through two atomic samples with 
opposite classical spins along the x-axis, F X j ~ (Fxj}> 
j = 1, 2, (F x i) = — {F X 2) = F, the input-output relations 



are given by [see Eq. H205(l ] 
S y °^ = + aS (Fji n) + Fj> n) ) , 

A(out) _ c(in) 

D z — D z , 

P£ ut) = i$ n) + aF Sf) , ^° ut) = P^ ] - aF , 

p£ ut) = F z ( i n) , F z ( ° ut) = F<£\ (263) 

These equations show that for a sufficiently large value 
of the quantity a S, a measurement of S'y OUt ^ reveals the 
value of the total 2-spin in a QND fashion, P^ +F^ ) = 
p(out) _|_ p(out)^ ^ e same time, the total y-spin is 
conserved as well, neither being changed by the inter- 
action, P^ + P^ = P£ ut) + F y ( ° ut) , nor affected by 
the measurement thanks to the vanishing commutator 
[P y i + P V 2,Pzi + F z2 ] — 0. Upon repeating this proce- 
dure with a different light pulse, but now measuring the 
total y-spin in a QND fashion (which will not change the 
previously measured value of the total z-spin), both the 
total z-spin and the total y-spin may be precisely de- 
termined. Thus, the resulting state of the two atomic 
samples has arbitrarily small variances for both y and z 
components of the total spin, 

{[A(F yl + P y2 )f) + ([A(P zl + P z2 )f) -> . (264) 

This would, in the ideal case, lead to a maximal violation 
of the necessary separability condition in Eq. I|119() (for x 
and z components interchanged). Under realistic exper- 
imental conditions, however, with imperfections caused 
by, for instance, losses of the light on the way from one 
sample to the other and spin-state decay between the two 
measurements, the resulting atomic state does not be- 
come perfectly entangled. Moreover, the vacuum noise of 
the incoming light pulse prevents the creation of a max- 
imally entangled state. The outgoing state, prepared af- 
ter the measurements, is then similar to a nonmaximally 
entangled two-mode squeezed state. 

In the experiment in Copenhagen, the protocol de- 
scribed above was slightly modified by adding a magnetic 
field oriented along the x-axis. Using only a single entan- 
gling light pulse, both the y and the z spin projections 
can be measured this way. The generated entangled state 
was maintained for more than 0.5 ms. This relatively 
long lifetime is due to the high symmetry of the state. 
The entanglement is based on the collective properties of 
the two atomic ensembles such that the coherence of the 
entangled superposition state is not destroyed when only 
a few atoms interact with the environment. This kind of 
robustness would not be obtainable in a maximally en- 
tangled multi-particle state. The degree of entanglement 
verified in the Copenhagen experiment corresponds to a 
fidelity of F w 0.55 when using the entangled state for 
teleporting an atomic sample in a coherent spin state. 
This clearly exceeds the classical boundary of F = 0.5. 

Although the entanglement produced in Copenhagen 
was bipartite, i.e., between two atomic clouds, one can 
easily think of an extension to more atomic samples. As 
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for an experiment in which the creation of such a gen- 
uine multipartite entanglement has been accomplished 
already, we will now return to the all-optical regime 
of squeezed-light resources and linear-optics transforma- 
tions. 



C. Generation of genuine multipartite entanglement 

We have seen that a particularly efficient way to gen- 
erate entanglement between electromagnetic modes is to 
let squeezed light beams interfere using linear optics. 
For instance, the generation of tripartite entanglement, 
the entanglement between three optical modes, only re- 
quires combining three input modes at two beam split- 
ters, where at least one of these input modes is in a 
squeezed state (see Sec. HII.B.4I) . The resulting entan- 
gled modes, even when spatially separated, exhibit quan- 
tum correlations, as described by Eq. I|137|) for N = 3. 
However, due to experimental imperfections, the three- 
mode states generated in the laboratory become noisy 
mixed states that might be partially or even fully sepa- 
rable. Therefore, one has to verify experimentally that 
the generated state is indeed fully inseparable, exhibiting 
genuine tripartite entanglement. Such an unambiguous 
verification can be achieved even without determining 
the entire correlation matrix of the generated Gaussian 
three-mode state. It is sufficient to detect a set of suitable 
linear combinations of the quadratures (see Sec. IIII.E|l . 
However, these must contain the positions and momenta 
of all modes involved. 

In an experiment in Tokyo ijAoki et a/1 12003^ . such a 
cv tripartite entangled state was created by combining 
three independent squeezed vacuum states at two beam 
splitters. For verification, the variances of the entan- 
gled state's relative positions and total momentum were 
measured. The fo llowing total variances were obtained 
iAoki et 120031) . 

I. ([A(x 1 -x 2 )] 2 ) + ([A(p 1 +p 2 +p 3 )} 2 ) 
= 0.851 ±0.062 < 1, 
II. ([A(x 2 -x 3 )] 2 ) + ([A(p 1+ p 2 +p 3 )] 2 ) 
= 0.840 ±0.065 < 1, 
III. ([A(x 3 ~ x x )\ 2 ) + ([A(pi +p 2 + p 3 )] 2 ) 

= 0.867 ±0.062 < 1. (265) 

These results clearly show the nonclassical correla- 
tions among the three modes. Moreover, according to 
Ivan Loock and Furusawal l|2003ft . the above inequalities 
unambiguously prove the full inseparability of the gen- 
erated tripartite entangled state. In fact, the measured 
variances correspond to violations of the conditions in 
Eq. I|154|l with Eq. (|155|l and Eq. (|156|l . Thus, any par- 
tially separable form is ruled out and the generated state 
can only be fully inseparable. 



D. Quantum teleportation of coherent states 

In the dv teleportatio n experiments in Innsbruck 
llBouwmeester etall Il997[) and in Rome l|Boschi et all 
1998), the teleported states were single-photon polariza- 
tion states. Continuous-variable quantum teleportation 
of co herent states has been achieved in Pasadena at Cal- 
tech llFurusaw a et al l Il998t |Zhang et all |2003|) and in 
Canberra ( Bo wen et all l2003rJ) . A realistic broadband 
description of these experiments can be obtained from 
the Heisenberg equatio ns for cv quantum teleportation 
ijvan Loock et adl2000]) . as given in Sec. lIV.A.TI 

For the teleportation of an electromagnetic field with 
finite bandwidth, the EPR state shared by Alice and 
Bob is a broadband two-mode squeezed state as in 
Eq. 12581) . The incoming electromagnetic field to be tele- 



ported, E ln (z,t) = E^\z,t) + El n ; (z,i), traveling in 
the positive- z direction and having a single unspecified 
polarization, can be described by its positive-frequency 
part 

6£\z,t) = [E(-\z,t)? 

w ^ \ 2cA t J mv ; 

(266) 

The integral runs over a relevant bandwidth W centered 
on luq and At r represents the transverse structure of the 
field. The parameter u is a units-dependent constant. 
By Fourier transforming the incoming field in the rotat- 
ing frame, we obtain the input modes as a function of 
the modulation frequency Q, Bi n (Q). As for the trans- 
verse structure and the polarization of the input field, we 
assume that both are known to Alice and Bob. 

Using the broadband EPR state of Eq. I|258(l . for her 
Bell detection, Alice combines mode 1 with the un- 
known input field at a 50:50 beam splitter. She ob- 
tains the quadratures X U (S1) = -^X in (fl) — -^Ai(f2) 

and P v (fl) = ^-Pm(O) + TfA(^) to be measured. The 
photocurrent operators for the two homodyne detections, 
i u (t) oc X u (t) and i v (t) oc P v (t), can be written (without 
loss of generality we assume il > 0) as 



(-)/ 



w 



i u (t) oc / dnh e i(n) x u (n) e - int + Xl(n)e 



iQI 



iv(t) 



oc 



dfU e i(f2) P v (^)e 



-tilt 



P v t(fi)e im 



(267) 



assuming a noiseless, classical local oscillator and with 
h c \(fl) representing the detectors' responses within their 
electronic bandwidths Ail i: h e i(fl) = 1 for f2 < Af2 c i 
and zero otherwise. We assume that the relevant band- 
width W (~ MHz) is fully covered by the electronic band- 
width of the detectors (~ GHz). Therefore, h c \(fi) w 1 in 
Eq. (|267|l is a good approximation. The two photocur- 
rents are measured and fed forward to Bob via a clas- 
sical channel with sufficient RF bandwidth. They can 
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be viewed as complex quantities in order to respect the 
RF phase. Any relative delays between the classical in- 
formation conveyed by Alice and Bob's EPR beam must 
be such that At -C 1/AQ with the inverse bandwidth of 
the EPR source 1/Af2. Bob's final amplitude and phase 
modulations correspond to 

x 2 {Q) — » Itei(O) = x 2 (n) + g(n)V2X u (si), 
P 2 (Ci) — ► Aci(n) = P 2 (n) + g(tyV2P v (Q), 

(268) 

with a frequency-depending gain g(Sl). 

For unit gain, <?(£!) = 1, the teleported field is 

r- ^(0) 

X tel (0) = X in (ft)-\/2S_(ft)X 2 (fi), 

r- -(0) 

p t ei(n) = p iu (n) + V2S-(n)p 1 (si). (269) 

Obviously, for unit-gain teleportation at all relevant fre- 
quencies, it turns out that the variance of each teleported 
quadrature is given by the variance of the input quadra- 
ture plus twice the squeezing spectrum of the quiet quadra- 
ture of a decoupled mode in a "broadband squeezed state " 
as in Eq. I|257|) . Thus, the excess noise in each teleported 
quadrature due the teleportation process is, relative to 
the vacuum noise, twice the squeezing spectrum \S- (Sl)\ 2 
of Ea. l(25SjL 

In the teleportation experiment of iFurusawa et al\ 
(1998), the teleported states described fields at modu- 
lation frequency Sl/2ir = 2.9 MHz within a bandwidth 
±A£7/27T = 30 kHz. Due to technical noise at low mod- 
ulation frequencies, the resulting nonclassical fidelity, 
F = 0.58 ± 0.02 (exceeding the limit of 1/2 for clas- 
sical teleportation of coherent states), was achieved at 
these higher frequencies Q. The amount of squeezing 
was about 3 dB, where the broadband EPR source as 
described by Eq. I|258l) was generated via interference of 
two independent OPO's. In a seco nd coherent-state t ele- 
portation experiment at Caltech ijZhang et all l2003j) . a 
fidelity of F — 0.61 ± 0.02 was achieved, which is a slight 
improvement compared to the first experiment. Finally, 
in the most recent cv qua ntum teleportation in Can- 
berra ijBowen et all l2003b|) . the best fidelity observed 
was F = 0.64 ±0.02. 



E. Experimental dense coding 

As described in Sec. IIV.BI as opposed to the reli- 
able transfer of quantum information through a classical 
channel via quantum teleportation, dense coding aims 
at transmitting classical information more efficiently us- 
ing a quantum channel. Thus, the roles of the classi- 
cal channel and the quantum channel are interchanged. 
However, like quantum teleportation, dense coding also 
relies upon preshared entanglement. In a dense coding 
scheme, the amount of classical information transmitted 
from Alice to Bob is increased when Alice sends her half 



of a preshared entangled state through a quantum chan- 
nel to Bob. In order to accomplish this, the local op- 
erations performed by Alice and Bob are interchanged 
compared to those in quantum teleportation: Alice en- 
codes the classical information by unitarily transforming 
her half of the entangled state; Bob eventually retrieves 
this information through a Bell measurement on his part 
of the entangled state and the other part obtained from 
Alice. In a dv qubit-based implementation, two bits of 
classical information can be conveyed by sending just one 
qubit. As discussed in Sec. HV.Bl comparing a cv imple- 
mentation based on squeezed-state entanglement against 
heterodyne-detection based single-mode coherent state 
communication, the channel capacity of the latter, given 
by Eq. I|188|) . is always (for any nonzero squeezing of 
the entangled state) beaten by the optimal dense cod- 
ing scheme described by Eq. (|198fl . In order to double 
the capacity of single-mode coherent state communica- 
tion, the dense coding requires infinite squeezing. This 
is similar to the ideal cv quantum teleportation where 
the fidelity limit of classical coherent-state teleportation 
is exceeded for any nonzero squeezing of the entangle- 
ment resource, and unit fidelity is achieved in the limit 
of infinite squeezing. 

In the dense coding experiment of iLi et all |2002b), 
bright EPR beams were employed, similar t o the entan- 
glement created bv ISilberhorn et al\ l)200l|) . However, 
as mentioned in Sec. IVII.A.2I the squeezed states in the 
experiment by Silberhorn et al. were produced via the 
Kerr \^ nonlinearity. The bright squeezed beams were 
then combined at a beam splitter to build the entangle- 
ment. By contrast, the bright EPR entanglement in the 
dense coding experiment of Li et al. was directly gener- 
ated from a nondegenerate parametric amplifier (NOPA, 
based on a interaction, see Sec. lVII.A.l|) . In order to 
accomplish the dense coding protocol on Bob's side, the 
"usual" cv Bell measurement as described in Sec. IIV.BI 
(using a 50:50 beam splitter and two homodyne detectors 
with strong local oscillator fields) must be replaced by a 
"direct Bell measurement" (jZhang and Pend |2000|) due 
to the nonzero intensity of the entangled beams. This 
direct Bell measurement corresponds to the direct detec- 
tion of the two bright outputs from a 50:50 beam split- 
ter. Eventually, the sum and the difference photocurrents 
yield 

»+(n) oc x[(n)-x 2 (n) + x s (n), 

L(f2) cx P{(n)+P^(Q)+P s (n), (270) 

where, using the same notation as in Sec. IVII.A.ll and 
Sec. IVIllDl X s (il) and P S (Q) are the quadratures cor- 
responding to Alice's classical signal modulations, and 
X'j(n) and P'jiSV) are those belonging to the entangled 
NOPA beams. As described by Eq. (|559"|) . due to the 
EPR-type correlations at those frequencies where squeez- 
ing occurs, Bob can simultaneously retrieve Alice's classi- 
cal modulations X s (Sl) and P s (fl) with a better accuracy 
than that given by the vacuum noise limit of two uncorre- 
cted beams. In the dense coding experiment of Li et at, 
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the NOPA's position quadratures Xj(fi) and momentum 

quadratures Pj(fi) were actually anticorrelated and cor- 
related, respectively, corresponding to interchanged signs 
in the expressions of Eq. I|270jl . i.e., X[(Sl) + X' 2 (Q) and 
P[(fl) — -£2 (SI). The measured variances were up to 4 dB 
below the vacuum noise limit. 

On the other hand, the individual NOPA beams are 
very noisy. The noise background in the signal channel, 
measured by Li et al. without exploiting the correla- 
tions with the other EPR beam, was about 4.4 dB above 
the corresponding vacuum limit. As a result, the sig- 
nal is to some extent protected against eavesdropping; 
only the authorized receiver who holds the other half of 
the EPR beam can retrieve the transmitted signal. This 
potential application of cv dense coding to the secure 
tra nsmission of c lassica l information was first realized 
bv iPereira et all ((2000) . Other quantum cryptography 
protocols utilizing EPR-type cv entanglement were dis- 
cussed in Sec. IIV.DI In the next section, we will turn to 
a non-entanglement based cv quantum key distribution 
protoc ol, experimentally dem onstrated by the Grangier 
group ()Grosshans et aZJ. l2003^ . 

As a final remark of the current section on cv dense 
coding, let us mention that the experiment of Li et al. 
demonstrates the potential of cv dense coding for un- 
conditional signal transmission with high efficiency only 
when the distribution of the presharcd entanglement is 
not counted as part of the communication (see Sec. HV.B")l . 
In other words, the entanglement distribution must be 
accomplished "off-peak". Otherwise, no advantage can 
be gained via the dense coding protocol, in agreement 
with Holevo's bound in Eq. (|158|l . On the other hand, 
non-entanglement b ased "true" quantum coding schemes 
i|Schumacherl 1 1 995j) can be considered as well. These 
schemes may indeed outperform their classical counter- 
parts, but would require a quantum computational step 
for the information decoding at Bob's side. An opti- 
cal proof-of-principle experiment of this type has been 
performed in the single-photon based dv regime demon- 
strating a super additive capacity una ttainable without 
quantum coding ijFuiiwara et aZJ . 12003^ . The conditional 
quantum gate required for the decoding was achieved in 
this experiment by encoding the quantum information 
into the spatial and the polarization modes of a single 
photon. So far, no quantum coding experiment of this 
type has been performed in the cv domain using the more 
"practical" cv signals. The main difficulty of such an 
experiment would be the cv quantum gate in Bob's de- 
coding procedure. It would require a non-Gaussian op- 
eration based on nonlinearities beyond those described 
by a quadratic interaction Hamiltonian and the LUBO 
transformation in Eq. Q51[) (see Sec. IVI|I . 



F. Experimental quantum key distribution 

In Sec. IIV.DI we gave an overview of the various pro- 
posals of cv quantum key distribution. Some of these 



proposals are based on the use of entanglement and oth- 
ers are "prepare and measure" schemes without directly 
utilizing entangled states. 

As for the experimental progress, a BB84-like 
(entanglement-fr ee) quantum c r yptog raphy scheme was 
implemented by iHirano et al\ (2003(1 at telecommuni- 
cation wavelengths using four non-orthogonal coherent 
states. A somewhat more genuine continuous-variable 
protocol, also b ased on coheren t state s, was recently 
implemente d bv iGrosshans et al\ ll2003l) . T his scheme, 
proposed bv IGrosshans and Grangierl l|2002 |). reli e s upo n 
the distribution of a Gaussian key l|Cerf et al\ . [2001). 
Alice continuously modulates the phase and amplitude 
of coherent light pulses and Bob eventually measures 
these pulses via homodyne detection. The continu- 
ous data obtained must then be converted into a bi- 
nary key using a particular reconciliation algorithm 
l|Cerf et all l2002j) . Complete secret key extraction 
can be achieved, for instance, via a reverse recon- 
ciliation technique (fol lowed by privacy amplification) 
l)Grosshans et all 120031). This method , experimentally 
implemented by IGrosshans et al\ l|2003j) , provides secu- 
rity against arbitrarily high losses, even beyond the 3 dB 
loss limit of direct reconciliation protocols, as discussed 
briefly in Sec. IHTDl 

In the experiment of lGrosshans et al\ l|2003j) , the mu- 
tual information between all participants, Alice, Bob, 
and Eve, was experimentally determined for different val- 
ues of the line transmission, in particular, including losses 
of 3.1 dB. The measured values confirmed the poten- 
tial security of the scheme according to the information- 
theoretic condition in Eq. 1203fl . which is sufficient for 
secure key extraction using privacy amplification and er- 
ror correction techniques. Eventually, net key transmis- 
sion rates of about 1.7 megabits per second for a loss- 
free line and 75 kilobits per second for losses of 3.1 dB 
were obtained. The s ignal pulses in the experiment of 
IGrosshans et al\ l|2003|) contained up to 250 photons and 
were emitted at a wavelength of 780 nm. The limita- 
tions of this experiment were considered to be essen- 
tially technical, allowing for further improvement on the 
present scheme. Therefore, implementing this or related 
schemes at telecommunication wavelengths could lead 
to efficient, high-bit-rate quantum key distribution over 
long distances. 



G. Demonstration of a quantum memory effect 

The creation of long-lived atomic entanglement, as de- 
scribed in Sec. I VII. B I is a first step for storing optical 
quantum information in atomic states for extended pe- 
riods and hence implementing light-atom quantum in- 
terfaces. Using a similar approach, a proof-of-principle 
demonstration of such a quantum memory effect was 
achieved in a furth er experiment by the Polzik group 
l|Schori et all (2002) . In this experiment, the quantum 
properties of a light beam were (partially) recorded in a 
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long-lived atomic spin state; thus, this experiment goes 
beyond a previous one where only a short-lived squeezed 
spin state of an atomic ensemble was generated v i a com - 
plete absorption of nonclassical light ijHald et qZj . ll99{^ . 

Similar to t he experiment for the creation of atomic 
entanglemen t llulsgaard et all . 12001). the experiment by 
ISchori et all <|2002|) also relies upon the polarization and 
spin representation for cv quantum information, as dis- 
cussed in Sec. III.FI Thus, the light and the atoms are 
described via the Stokes operators and the operators for 
the collective spin, respectively. The atom-light interac- 
tion employed in the experiment is again based on the 
QND type coupling between the atomic spin and the po- 
larization state of light, as described in Scc. flV.FI 

For describing the experiment bv lSchori et al\ (2002). 
we again consider an atomic sample classically spin- 
polarized along the x-axis, F x ~ (F x ) = F, and similarly 
for the light, S x ~ (S x ) = S. Hence again the only quan- 
tum variables involved in the protocol are the atomic 
operators F y and F z and the light operators S y and S z , 
i.e., the y and z components of spin and polarization are 
the effective phase-space variables. The quantum prop- 
erties of light to be transferred to the atoms are those 
of a vacuum or a squeezed optical field, i.e., those of a 
(pure) Gaussian state of light. An off-resonant light pulse 
prepared in such a state propagates through the atomic 
sample along the z-axis and leaves its trace on the sam- 
ple. As for the relevant input-output relations of this 
interaction, we may now only write [see Eq. I|205l) ] 

i^ out ) = F^+aFS^, (271) 
S*<° ut > = S y in) +aSF( [a l (272) 

In the experiment bv lSchori et all J2002), the optical in- 
put state was squeezed in the Stokes operator S y and 
correspondingly antisqueezed in S z . This antisqueezing 
was mapped onto the atomic state and eventually read 
out through a detection of the outgoing light. The pro- 
tocol consists of the following steps: first, S z is mapped 
onto the atomic variable F y , as can be seen in Eq. I|27ip . 
However, like in the experiment for creating atomic en- 
tanglement, the protocol is slightly modified by applying 
a constant magnetic field oriented along the x-axis. This 
gives rise to Larmor precession where the value of the 
Larmor frequency determines the frequency component 
of light to be stored in the atomic sample. Including the 
magnetic field, the actual evolution of the atomic spin is 
more complicated than it is described by Eq. I|27ip . How- 
ever, the coupling term responsible for the back action 
of light onto atoms per time interval dt is still given by 
aF S z (t) dt, leading to the corresponding change dF y (t) 
depending on the value of S z (t). Moreover, due to the 
external magnetic field, F y (t) and F z (t) get linked with 
each other such that F z and hence F y can be read out 
via S y according to Eq. I|272|) . For this last step, one can 
exploit that S'y OUt ' ) in Eq. (|272|l is more sensitive to Fz"^ 
due to the squeezing of S y n \ 



In the experiment bv ISchori et all l)2002j) . the power 
spectrum of S y oxlt ^ was measured, yielding clear evidence 

that the antisqueezed variable si ln ^ was stored in the 
atomic sample. Hence it was shown that partial infor- 
mation about an optical Gaussian quantum state, i.e., 
the value of one quadrature variable can be recorded in 
an atomic sample. This storage of quantum informa- 
tion was achi eved over a duratio n of approximately 2 
ms. However, ISchori et all l)2002|) did not demonstrate 
full quantum memory of an optical Gaussian state. In 
order to accomplish this, two conjugate variables must 
be recorded and for verification, the fidelity between the 
input and the reproduced output state has to be deter- 
mined. For Gaussian signal states, this corresponds to 
reproducing values of the output variances sufficiently 
close to those of the input variances, similar to the ver- 
ification of high-fidelity quantu m teleportation. The ex- 
periment bv lSchori et all l)2002|) . however, is a significant 
step towards full quantum memory, because it was shown 
that long-lived atomic spin ensembles may serve as stor- 
age for optical quantum information sensitive enough to 
store fields containing just a few photons. 



VIII. CONCLUDING REMARKS 

The field of quantum information has typically con- 
cerned itself with the manipulation of discrete systems 
such as quantum bits, or "qubits." However, many 
quantum variables, such as position, momentum or the 
quadrature amplitudes of electromagnetic fields, are con- 
tinuous, leading to the concept of continuous quantum 
information. 

Initially, quantum information processing with contin- 
uous variables seemed daunting at best, ill-defined at 
worst. Nonetheless, the first real success came with the 
experimental realization of quantum teleportation for op- 
tical fields. This was soon followed by a flood of activity, 
to understand the strengths and weaknesses of this type 
of quantum information and how it may be processed. 
The next major breakthrough was the successful defini- 
tion of a notion of universal quantum computation over 
continuous variables, suggesting that such variables are 
as powerful as conventional qubits for any class of com- 
putation. 

In some ways continuous-variable computation may 
not be so different from qubit-based computation. In 
particular, limitations due to finite precision make quan- 
tum floating-point operations, like their classical coun- 
terparts, effectively discrete. Thus we might expect a 
continuous-variable quantum computer to perform no 
better than a discrete quantum computer. However, for 
some tasks continuous-variable quantum computers are 
nonetheless more efficient. Indeed, in many protocols, 
especially those relating to communication, they only 
require linear operations together with classical feed- 
forward and detection. This together with the large 
bandwidths naturally available to continuous (optical) 
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variables appears to give them the potential for a sig- 
nificant advantage. 

However, notwithstanding these successes, the very 
practical optical cv approach, when solely based upon 
Gaussian transformations such as beam-splitter and 
squeezing transformations, feed-forward and homodyne 
detections, is not sufficient for implementing more ad- 
vanced or "genuine" quantum information protocols. 
Any more sophisticated quantum protocol that is truly 
superior to its classical counterpart requires a non- 
Gaussian element. This may be included on the level 
of the measurements, for example, via state preparation 
conditioned upon the number of photons detected in a 
subset of the Gaussian modes. Alternatively, one may 
directly apply a non-Gaussian operation which involves a 
highly nonlinear optical interaction described by a Hamil- 
tonian at least cubic in the mode operators. 

Though being a significant first step, communication 
protocols in which this non-Gaussian element is miss- 
ing cannot fully exploit the advantages offered by quan- 
tum mechanics. For example, the goals in the Gaus- 
sian protocols of cv quantum teleportation and dense 
coding are reliable transfer of quantum information and 
increase of classical capacity, respectively. However, in 
both cases, preshared entanglement is required. Using 
this resource, via teleportation, fragile quantum infor- 
mation can be conveyed through a classical communi- 
cation channel without being subject to decohcrcncc in 
a noisy quantum channel. In entanglement-based dense 
coding, using an ideal quantum channel, more classical 
information can be transmitted than directly through a 
classical channel. For transferring quantum information 
over long distances, however, entanglement must be dis- 
tributed through increasingly noisy quantum channels. 
Hence entanglement distillation is needed, and for this, 
Gaussian resources and Gaussian operations alone do not 
suffice. Similarly, "true" quantum coding would require 
a non-Gaussian decoding step at the receiving end. In 
general, any cv quantum computation that is genuinely 
quantum and hence not efficiently simulatible by a clas- 
sical computer must contain a non-Gaussian element. 
Among the communication protocols, cv quantum key 
distribution appears in some sense exceptional, because 
even in a purely Gaussian implementation it may well en- 
hance the security compared to classical key distribution 
schemes. 

The experiments accomplished so far in cv quantum in- 
formation reflect the observations of the preceding para- 
graphs. Gaussian state preparation, including (multi- 
party) entangled states, and Gaussian state manipula- 
tion are techniques well understood and implemented in 
many laboratories around the globe. However, in order 
to come closer to real applications, both for long-distance 
quantum communication and for quantum computation, 
a new generation of experiments is needed, crossing the 
border between the Gaussian and non-Gaussian worlds. 
Beyond this border, techniques from the more "tradi- 
tional" single-photon based discrete-variable domain will 



have to be incorporated into the cv approaches. In fact, 
a real-world application of optical quantum communi- 
cation and computation, possibly including atom-light 
quantum interfaces and atomic quantum memories, will 
most likely combine the assets of both approaches, the 
continuous-variable one and that based on discrete vari- 
ables. 
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